A user’s security rights will limit what is returned by a user report. For example, if the user does not have rights to company ABC, then a report that should normally run against the entire system will not return data for the ABC company when that user runs the report. Access to companies is controlled on the User Maintenance screen.

Screen rights can be limited by role for the System & Company User Reports screens on the Role Maintenance screen, A possible configuration for a client user would be to grant their role only “View” and “Execute” rights. This will allow them to run reports and change parameters when prompted, but they will be unable to modify or delete the report.

If a data field is encrypted and the user's role does not have the right to decrypt the field, the user will see the word (Encrypted) instead of the actual encrypted value in the user report output. You can check how to add extra layer of data encryption here.

System and company reports can be locked for publication to prevent users from accidentally changing a user report. Learn more here - how to lock and unlock a User Report Publication.