# User rights on ODK Aggregate

**URL:** <https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811>\
**Category:** Support\
**Tags:** odk-aggregate\
**Created:** [September 13, 2017, 1:27pm UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811 "2017-09-13T13:27:31Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Saad](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/saad/32/4537_2.png) [@Saad](https://forum.getodk.org/u/Saad)\
**Post date:** [September 13, 2017, 1:27pm UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/1 "2017-09-13T13:27:31Z")

</div>

Hi,

I want a user-A on Aggregate to be able to view form-A submissions only. Similarly, user-B should only be able to view form-B submissions, and nothing else.

Is this possible so far in Aggregate?

Regards,  
Saad Omer

---

<div class="post-metadata">

**Author:** ![A.N.M\_AL-IMRAN](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/a.n.m_al-imran/32/1610_2.png) [@A.N.M\_AL-IMRAN](https://forum.getodk.org/u/A.N.M_AL-IMRAN)\
**Post date:** [September 13, 2017, 1:32pm UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/2 "2017-09-13T13:32:05Z")

</div>

Hi Saad,

I don't think you can grant form specific privilege on ODK. If you grant someone, view form role, that means that person will be able to view all forms in that Aggregate server.

Thanks,  
Imran

---

<div class="post-metadata">

**Author:** ![Nader](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/nader/32/2015_2.png) [@Nader](https://forum.getodk.org/u/Nader)\
**Post date:** [September 13, 2017, 7:04pm UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/3 "2017-09-13T19:04:38Z")

</div>

Hi Saad,

in fact Imran is right about the single instance of ODK aggregate

but if you want to do like what you want you can install ODK Aggregate again in your server so you will get 2 ODK aggregate instance A, B (when you install ODK aggregate there is a dialog in the installation called ODK Aggregate Instance Name)

 ![Untitled](https://getodk.b-cdn.net/uploads/default/original/2X/1/1a2406faa679c2d160a1e2fb5c9595a8f8930514.png)

you have to make it unique Like A,B  
know you can specify your user A to ODK aggregate A, User B to ODK aggregate B

---

<div class="post-metadata">

**Author:** ![LN](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/ln/32/1605_2.png) [@LN](https://forum.getodk.org/u/LN)\
**Post date:** [September 13, 2017, 9:28pm UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/4 "2017-09-13T21:28:24Z")

</div>

You may be interested in the desired features described at [Different users get access to different forms](https://forum.getodk.org/t/different-users-get-access-to-different-forms/6971) and [Group-specific permissions in Aggregate](https://forum.getodk.org/t/group-specific-permissions-in-aggregate/7129). Consider voting for features that would be useful to you and adding details on your specific use in the comments.

---

<div class="post-metadata">

**Author:** ![A.N.M\_AL-IMRAN](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/a.n.m_al-imran/32/1610_2.png) [@A.N.M\_AL-IMRAN](https://forum.getodk.org/u/A.N.M_AL-IMRAN)\
**Post date:** [September 14, 2017, 3:33am UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/5 "2017-09-14T03:33:06Z")

</div>

Thanks, Hélène,

Voted for the 1 st one, form specific privilege. In fact, that will be a great addition to Aggregate.

Imran

---

<div class="post-metadata">

**Author:** ![A.N.M\_AL-IMRAN](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/a.n.m_al-imran/32/1610_2.png) [@A.N.M\_AL-IMRAN](https://forum.getodk.org/u/A.N.M_AL-IMRAN)\
**Post date:** [September 14, 2017, 3:34am UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/6 "2017-09-14T03:34:10Z")

</div>

Dear Nader,

For the time being, this is a helpful solution. I will give a try.

Thanks,  
Imran

---

<div class="post-metadata">

**Author:** ![Saad](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/saad/32/4537_2.png) [@Saad](https://forum.getodk.org/u/Saad)\
**Post date:** [September 14, 2017, 6:24am UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/7 "2017-09-14T06:24:48Z")

</div>

Nader, thanks. If I have 2 aggregate front-ends but with common database, all forms would still be visible on both aggregates. How would I achieve form-level filtering on this?

For the other scenario, if I keep both aggregates separate (the DBs too), then this is effectively launching as many aggregate instances as many users I want. This is a workaround alright but too painful, because of launching so many aggregates (doesn't matter if all are on single server or multiple).

---

<div class="post-metadata">

**Author:** ![Nader](https://getodk.b-cdn.net/user_avatar/forum.getodk.org/nader/32/2015_2.png) [@Nader](https://forum.getodk.org/u/Nader)\
**Post date:** [September 15, 2017, 11:04pm UTC](https://forum.getodk.org/t/user-rights-on-odk-aggregate/9811/8 "2017-09-15T23:04:57Z")

</div>

HI Saad,  
Hi Imran,

am sorry i missed to tell you that,

when you install the Aggregate it will ask you for user name

 ![fdsfsfdsdf](https://getodk.b-cdn.net/uploads/default/original/2X/9/9eb1d44c04da26dc23731e1c00d7b7d221d95b95.png)

and schema (database in installation dialog) which will contain your data in the database

 ![ghgfhfhfgh](https://getodk.b-cdn.net/uploads/default/original/2X/d/de7567167ec6fda0152e45a59010cf108291f4cc.png)

it is "odk\_prod" this is the default

you have to change it to be unique like

```
            user Name schema

```

aggregate A \>\>\>\>\>\>\>\> UserA \>\>\>\>\>\>\>\>\>\> odk\_A  
aggregate B \>\>\>\>\>\>\>\> UserB \>\>\>\>\>\>\>\>\>\> odk\_B

Best Regards
