Access List in Reporting
Overview
Reporting plays a central role in human services work. Supervisors use reports to understand team performance, program directors rely on them for funder and board updates, and frontline staff use reports to manage their caseloads.
Access List in Reporting allows your organization to control who can see each report, ensuring staff only view reports relevant to their role, program, or responsibilities. This reduces noise, supports privacy requirements, and gives leadership clearer visibility into scoped data.
With reporting access controls, you can:
-
Grant report access to specific users or teams
-
Prevent users from seeing organization-wide reports that do not apply to their work
-
Reduce accidental exposure to sensitive or agency-wide insights
-
Support supervisors who need reports scoped to their direct staff
-
Ensure frontline workers only see data essential to their caseloads
-
Allow Reporting-Only access scoped to specific reports (ideal for Board Members or Funders)
These controls create clearer role boundaries, stronger privacy protections, and a simpler reporting experience for staff.

How Reporting Access Works
Reporting access is managed through Access Lists, which determine who can view each report. There are two list types that control visibility:
Allow List
-
Users or teams on the Allow List can view the report
-
Applies only to users whose role includes Limited Access: Reporting
-
Allows targeted access without granting full reporting visibility
Deny List
-
Users or teams on the Deny List cannot view the report
-
Applies even if the user:
-
Appears on the Allow List, or
-
Has broader reporting permissions in their role
-
The Deny List always takes priority over the Allow List.
This structure gives administrators precise control over report visibility across teams and programs.
Setting Up Reporting Access

1. Open the Report Settings
-
Go to Reporting
- Choose a Report
- Navigate to the Access Column
-
Open the Edit Access modal
2. Add Users or Teams to the Allow List
Use the Allow List to grant report visibility to:
-
Individual users
-
Teams
-
Program units
-
Supervisors
-
Leadership roles
Users on the Allow List will see the report unless they also appear on the Deny List.
3. Use the Deny List When Needed
Add users or teams to the Deny List when you need to:
-
Block access for specific departments
-
Restrict leadership-level or audit reports
-
Remove access without changing role permissions
-
Override inherited or accidental access
Deny List access always overrides Allow List access.
4. Assign Limited Access: Reporting
To restrict a worker’s reporting experience to only assigned reports:
-
Go to Admin
-
Open Roles & Permissions
-
Select the worker’s role
-
Enable Limited Access: Reporting
Once enabled, users will only see reports where they are included on the Allow List.
Important: Limited Access: Reporting must be enabled for Access Lists to apply.
5. Bulk Access Management
For larger organizations, administrators may be able to assign access to multiple reports at once. This is especially useful when:
-
Onboarding new teams
-
Restructuring programs
-
Preparing for audits or funder reporting cycles
What Workers Will See
- If they are on the Allow List
The report appears in their reporting library
- If they are on the Deny List
The report does not appear, even if they previously had access
- If they have Limited Access: Reporting
They only see reports explicitly assigned through the Allow List
- If no access was granted
The report does not appear in their reporting library
Best Practices for Human Services Agencies
-
Assign reports by program, not just individuals
-
Give supervisors access to all reports for their team
-
Limit frontline worker access to reports supporting their caseload
-
Use Deny Lists for leadership, audit, or agency-wide dashboards
-
Review access during onboarding, offboarding, and team changes
-
Update access lists when responsibilities shift (e.g., caseload rotation)
Frequently Asked Questions
- Can a worker see a report if they’re not on the Allow List?
Only if their role includes full reporting access and they are not listed on the Deny List. - What if someone is on both the Allow List and the Deny List?
The Deny List always overrides the Allow List. - Does this control what data appears inside a report?
No. Access Lists control report visibility only, not the underlying data or filters. - Do supervisors automatically see their team’s reports?
No. Supervisors must be explicitly added to the Allow List for each report.