Reporting permissions reference
This page lists the permissions that control access to reporting and analytics features, what each one unlocks, and which role holds it by default.
Permission summary
Section titled “Permission summary”| Permission | Who holds it | What it unlocks |
|---|---|---|
| reports:view | Both Admin variants + Board Member | Admin dashboard (dashboard_get); general reporting read access |
| Report read (report-list access) | Both Admin variants | Reading the report list and viewing saved report results — browsing reports, polling run status, reading row-level results |
| reports:view-board | Board Member / Governance Reader | Board aggregate dashboard (board_dashboard_get) |
| reports:view-finance | Both Admin variants | Per-member rows in aging receivables; the finance-level drill (board_financial_summary_get) |
| reports:run | Both Admin variants | Running pre-built financial reports (reports_run) |
| reports:export | Both Admin variants | Exporting any report (report_runs_export) |
| Member-detail export permission | Both Admin variants (when granted) | Including member names and email addresses in a report export |
What each role can and can’t do
Section titled “What each role can and can’t do”Both Admin variants (Volunteer-Run Nonprofit Admin and Professional Association Staff Admin)
Section titled “Both Admin variants (Volunteer-Run Nonprofit Admin and Professional Association Staff Admin)”Admins hold reports:view, report-list access, reports:run, and reports:export by default. With these, an admin can:
- View the admin dashboard (rate metrics + operational counts)
- List and read saved reports and their results
- Run all pre-built financial reports
- Export reports in CSV, Excel, or PDF
- Drill from dashboard cards into filtered lists
To view per-member rows in the Aging receivables report, an admin additionally needs reports:view-finance. Without it, per-member rows are replaced by aggregate bucket counts (the same posture as the board view).
Board Member / Governance Reader
Section titled “Board Member / Governance Reader”Board members hold reports:view and reports:view-board. With these, a board member can:
- View the board aggregate dashboard (aggregate metrics and counts, no member names)
- View the board aggregate financial summary
- Export aggregate data (CSV, Excel, or PDF) — no per-member columns included
Board members do not have access to per-member drill-throughs or member names in any context. This is a governance design feature, not a restriction. See How the board view protects member privacy.
Dual-role (Board member who is also an admin)
Section titled “Dual-role (Board member who is also an admin)”If a person holds both a board role and an admin role, they can switch between the Board portal (/board) and the admin view (/admin/dashboard) using the View as admin button. The Board portal always uses the board-role scope — switching to admin is the only way to access per-member data.
If you need a permission you don’t have
Section titled “If you need a permission you don’t have”Contact your organization’s primary admin. They can adjust your role’s permissions in the admin settings.