welcome to platform analytics academy um morning good afternoon good evening wherever you may be my name is thomas davis and i'll be the host today um i'm gonna go through some real quick logistical information as usual and then we will get directly into the content that we have for you today so with that [Music] there we go so as usual these are always for you we try to bring as many fresh ideas and better understanding and practical guidance sessions that we can to you uh it is going to be recorded is recording actually i'm sorry uh it'll be out on the community event later on this afternoon it'll also be out on youtube on our channels um and we will have q and a's so please feel free to ask questions uh in the q a section of the zoom call if you can and we do have uh other panelists on as well and we'll answer those questions as we can um if questions can be answered during the actual presentation that are relevant to wherever we're at in that i will stop the presenter and ask those questions you're more than welcome to ask other questions that are unrelated to the content that we're covering today um if that question needs to be answered live it will come after any questions that are related to the content that we have here but if that uh question can be answered via a panelist then we'll do that while the actual presentation is happening um as well so today we're going to talk about uh acl assessments for reports this is a uh a new feature and marta is going to actually present that and then she also has hetem with her as well um and he'll just be a panelist but he'll be here for her support along with myself we also have dan kane and tara fish fisher and also josh cooper um and i think that they're making their way in uh now but we have plenty of panelists outside even of the presenter so we should be able to answer uh plenty of questions and um you know get to everything that we have so with that like i said we're going to talk about acl assessments so marta if you are ready you're more welcome to take sharing and go ahead and get started thank you very much hello everyone so let me share my screen so indeed today we are going to talk about this acls assessment for reports it's a store application that we have released last year it does support from back onwards of course there are different versions now available on the store and um also different targeted releases that they are associated with but let's talk a little bit more about what the acls are and why we have specific acls for reports uh i believe all of you are comfortable what access controls are and what we have them as a layer of control on the tables and the data um we have added that throughout the years actually what we call the report view acls or rva um that actually limits the users to to see sensitive data but when the actual reports are see a pie or a bar chart then you we needed an extra level um of acls to uh to control uh which users and which roles could be cool see that data throughout the years um the service now and all the application business units have created more tables and they've also created the report view acls associated to those tables so uh what happened is that if you were getting a new instance uh from new york patch down onwards um most of these report view acls also throughout paris rome and san diego they were enabled by default but if instead you are um customers that has been with servicenow for longer uh you might have installed all this application but then the report view acls are actually currently set to false so we have started this program to actually make sure that the report view acls were gonna get uh enabled in all our uh the customer instances uh so that you have a better security regarding the the reports data that you are going to share with your internal and external users so that means that also as a behavior the behavior might change uh enabling the report of uals means that you might block the access to view the data to some of the uh the users and that's why we have released this store application the store application allows you to scan and then remediate all the affected reports or the effective reports that you still consider that are valuable for for your instances and for your users so um so the example is you see aggregated report data and your report is shared um and if it summarizes for example sensitive financial data we actually want to have not only temple level data uh acls but also the reported us so we are making sure that that report doesn't show uh and doesn't display a result of that aggregated data to users that should not have access to so what does the acos assessment for reports does first of all you need to be admin with the security admin role so you have to have elevator role privilege um and once you enable the store application uh you are gonna actually have a list of all the report view icls that we deliver out of the box that you currently have installed and we are gonna do the check only based on those report uac also um we constantly have a list of all these out-of-the-box reports of ucls that we as servicenow have delivered but it also could be that you have added more throughout the years uh those the ones that you have customized or the ones that you have created uh by yourself separately those will not be tracked into the scanner uh but then the security admins after the scan has been done uh they will be able to do some remediations so it could be that you're gonna need to change the sharing permission on the reports uh maybe because you are discovering that that reporter should not not be shared that widely uh you might need to create a new group and add the affected users with the new appropriate rules uh to to that group or maybe add users to an existing group or change the report view hcl uacls to allow more roles to access the data and that's those are the four type of remediation that we suggest so first thing first is to run the assessment uh there is a dashboards that i will show you later uh that allows you to run the assessment scan uh so by default we actually run based on the report execution table um that means that only the reports that have been viewed and by default is the 365 days will be considered in the scan and then from that point on we'll consider all the users that uh have viewed those uh that are affected by those reports um if you want to increase the number of days that's also possible via the property um as well as you can decide also to run it without considering the report execution and then it will run for all the reports and that's the parts below is like you can run the assessment on a particular set of reports or users so for example i only first want to fix everything that is connected to my financial data or my sales data or i then go later on going through my incident or like task tables so that you could do it uh like inbox so that's what the first um the first property it uses for the second one if instead you want to consider some specific users first uh based on like maybe you want to have your c-suite levels or like your management level making sure that for them all the reports are fixed uh and then subsequently do all the other users so and the last property is instead if you instead of using you don't want to use the report execution table uh to be considered and you actually want to i use the entire um or cis cis report table and after running the assessment you're gonna be able to see this kind of results uh so we have a step two that is uh actually in the dashboard the showcase all the impacted reports as well as we have a menu alternator where you can find the full list and from the list you can go in into each of the reports and have more informations about which are the current sharing permission on the reports but which are also the acls on the table and column level that are impacting the users so uh you will see a button that says show affected users and that will give you the information of like initially the top five um affected users but that's also property that can be increased and once you have your list of uh affected users then you will need to an effective report so you will need to do the remediation so it's to as said before change the sharing permissions to create a new group and add those users to the group and add the users to an existing group or change their priority view ac also um so the remediation all need to be taken care of manually by the security admin um we don't have any automated workflow we have a flow and action from the list to assign users to an existing group and then subsequently they will get also the roles that are part of the group uh it's important to notice that is like a report view uh multiple reports could be blocked uh by the same report view hcl so maybe changing uh one report view hcl um adding additional rules will actually end up fixing the multiple reports uh if they are all of the users are then added to the correct groups and have the appropriate also and this is the only actions that we have uh in the part of the um when we see the affected users you're gonna be able to select one of multiple users and have the action assign users to group uh there will be a slash bucket uh that will actually show you these are all the users that you have selected and these are all the groups that have one of the blocking rules so it means that adding that user to one of those groups will give them back access to the report if there are no groups uh in the in the system uh then we will actually display all the groups that are available uh in the instance and it will mean that you're gonna be able to select if in that group you don't only want to add the users but you also want to add a specific goal uh a role to the group that will then give access to the report and as a final thing well you have done uh the remediation for uh all the reports that are important to you at that moment uh than the security admin can enable the report of the acls from the reported sales dashboard so there is a step three that is the finalize changes so where there is going to be a button that is enable report view hcls and once that is clicked uh the reported uals will move from active false to active true and you will actually have a message underneath the button and that it says to you when it was enabled so let me go into a demo okay i am on uh the report a acls dashboards uh so the plugin actually will give you access to these menus so you have a sales assessment for reports so this is for the report sales as a sql dashboard that i'm showing right now the affector report list in your reports or user list in case you don't currently uh consider to fix those reports and users you could mark them as ignored and the report view acls list this one is the list of all the out-of-the-box report view acls that we are going to consider as you can see some of them are in full state right now and i have already run one of the scan and you can see from the step one i have already done executed uh the the scan but i can trigger it again and you can see the progress um [Music] right now it's it's demo data so it's quite fast but depending of the amount of reports that you have on the instance it might take uh way longer so that's why there was also the button from view partial scan so the assessments kind of can run in the background and you will get the list updated as as you go and then you have some data about how many reports are impacted uh the percentage that are affected and when it was run and when it was finished and down below here it's the list of all the impacted reports so i can open any of these and i will go to the record itself um and there here there are information about the table in this case this is global so it's actually shared with everyone so all users will have access so that means that the impacted users are big uh and these are blocked by the tables acls um and blocked by table acl schools so this and here is the link to the actual acls that are blocking the the users to see the the report and this is the current report i can click on show affected records and right now i see five users and then what we can do is that we can select one or multiples and for example assign to group and then you're gonna have this lash bucket uh with all the users that were already selected and these are the groups that right now have one of the blocking goals uh already in the group so it means that if i um say that jimmy and you uh will gonna be part of the field services then they're gonna also get the roles from the fuel services group uh that are gonna be give them access to the um to their report because those groups will probably have one ideal or sn incident to read that are one of the rules that are blocked and amarda real quick yes question came in that says does it not capture the data related to customized roles if we have any i'm asking this as you mentioned it scans only out of the box user roles and i'll jump in um customize the roles they will be captured customized acl if they are part of the auto boxes here they will be captured in uacs they will not be captured so if i added new role to one of those autobox seos and i ran the scan and we found out that we need like the use the affected users need one of those customized roles then they will appear there okay thanks wait morris great absolutely um and then as after well more of these reports are actually fixed you're gonna see in the finalized changes this enable report view hcl button and when it's actually clicked you will have this this message for the properties uh let me just show you which are the properties um i add actually this one was to run the scan based on report execution only um since it was a demo data i've actually said this to false but the default value is actually set to true um and also what i've done i've done a change to only consider uh the cis reports that have the table starts with incident so i was actually going through so you can put here at the the query so i just went to sis report i've done the list i've done the queries with the condition builder and then i've done a copy query and pasted it into the value field and similar can be done also for the sys user table and this property uh it's the max affected users so right now as default is set to five uh but it can also be increased and that's all from my side i'm not sure if there are questions on this part yeah so uh tim is answering one uh via typing but we'll just go through some of these here so so when the scan runs and it shows the impacted reports these are already impacted and have to be re remediated or they would be once let me see that or they would be once the acls are added i can't figure out if this is a reactive tool or a proactive tool uh this is a proactive tool so it it means that these reports will be impacted once you enable the report view acls so until until you click on the button below over here enable report vcls the reports and the affected users will not be impacted okay so these are all coming from someone that's named anonymous so i don't know if it's multiple people or the same one but um when we are selecting a group to add a user are there any plans to allow us to easily check which roles are associated to the pronounced group before we decide to assign it to one of the users missing those roles um we don't have this in pipelines for now in the meanwhile we just display the groups that have one of the blocking roles without staying more information about those maybe we need to see those groups outside of the app and then decide which one of those groups matching the best but also like on on the top forum we display like three sentences or three instructions where they say that it's better to create your own group adding one of the required roles and then add the user or the user to this new group rather than adding to an arbitrary group okay um so i don't know if this one was a follow-up to the one that you answered uh martyr or not but it says so if a report view acls had already been enabled could i still use this yes uh there is no problem on using this um uh you're you're gonna see still which are the impacting reports as long as the um report view icls is one of the out of the box that we have provided yeah the app the app will be like available after activating the acls and also if new of the box sells added to the instance and after enabling plugin that provide one of those outer box the button of enabling those acs will still be available and once you click on it it will activate only those that they are not active so both run assessment scan and the button of activate the cs will remain active okay great uh there was one uh that was actually asked and someone actually uh typed the answer to that and and someone said that they can't see once the questions are answered so um the question was if you only want users let's say with the sn incident read only role to view the dashboard report as they were able to previously how can we still allow that without having to use an idle license and the answer was the app doesn't handle licensing so if one of the required roles has license implications admins need to consider them before adding those to those roles and then we had another question that came in when we ran through our assessment the reports that users were able to see prior can no longer access the report as it says they need specific roles including idle which we do not want to give them so this may actually go further with the question that you had answered yeah right the app is basically um displaying like what admins or security admin need to do in order to allow those affected users from seeing the report and it's up to them to decide whether they want to allow this user or not and it's up to them to decide or consider with their like whether those roles have um license implications that they need to conserve the app just like display to them all the information that they need in order to make a decision and it's up to them to decide how they can move forward also like the app allows them to decide for example to ignore users like yeah i can see those users are affected but no i don't want to add of them anything and then they can there's an action called ignored also for the affected users and also on the report level where admin can say okay i don't want to uh to handle those because i'm happy with the situation right now so just hit the ignore button then from next scan onward those reports or affected users won't appear yeah as well as most probably also possible to create um a new role i don't think there is any problem on creating new roles uh even if it's not connected to the itil license and add that role to the report view acls yeah that's also an option [Music] so yeah and as a follow-up they said so basically servicenow is forcing us to use more idle license which they used to be able to view reports without an idle license which marty you may have just answered that with a new role right yes chris we can i can see your question although it's not a question great so so and then follow-up said sorry what new role should we provide and i think that what you were saying is you're talking about creating another role that would give the access you're looking for right yes because the like you need to see it in this way um everything starts with with who the report is shared with so if we share the report for certain users and from the other hand we have report view acl that restricting viewing like certain tables that our report is based on one of those tables then we need that role that's final record view acl to be including the roles that the the share the report and like the shared user like that missing role should be as part of the user that we share the reports too so you can do exactly as martin says where we create a report new sorry enroll new role and add it to the acl and also add it to either to your user with our recommendation to go with servicenow recommendation where we say create a new group add to that group that new role that also added to the acl and then add the users to that group and then those users will have the required role that's also required for the reproducible okay great thank you so much there aren't any uh questions currently so if you want to finish up and then we'll we'll open up the floor and see if there's other questions as well yeah perfect uh so i need we have uh there are different versions uh uh on the store um about the seos assessment for reports so uh that's because we wanted to make sure that from the earliest as possible you could actually use uh even if you have not uh upgraded to the latest family so the earliest release for this is quebec patch eight uh we are gonna have a new version a new patch version of the acls assessment for reports coming out in august and that will support the rom patch then and san diego patch five and then you're gonna have these slides available so also the links to the documentation and the kb article explaining all the steps um and the remediation that you could take and finishing up with uh if there are more questions sure okay so um the presentation and demo portion is complete and and we have 30 minutes left so uh if there are more questions that are related to the content that was uh discussed today or any other questions um you have a great opportunity with the remaining time that we have and the people that are on the call so some very knowledgeable people on the panel panel so if you have some questions please feel free to ask um if no one does then we'll obviously this will be probably one of the quickest ones we've had but somebody some some tell me someone has a question so uh one came in says can you demo what role should be provided i can can be literally any rule you will need to create so if you go to roles you can create a new role and that role can be added to any of the uh report view a skills that you need to fix so over here no not this one you can add over here the new role that you have created and that will actually give access to the users that then have that role so you can create a group add that new role to a group uh and then add all your users uh to to that uh to that group and they will have the new role so basically i mean this this isn't anything any different than creating a role i mean you just yes exactly add it to a group if you choose to take that role add it to the um read acl or whatnot wherever you need it and and it's done so this is this is a common practices i don't think that there's anything new that's required for what mart has been talking about if you need to create an additional role you just you just create it and then add it where you need it right margo yep okay and uh so for the the question about um required plug-in installations uh um so this is a store application so you can find it if you search by acls assessment for reports so you will find it in the store um there is other than reporting that is installed in all the instances and there is no other actual dependency so that's that's all um is it possible to limit the records for both the report widget and pa widget on the same dashboard using the same oh that's that's a outside question that's okay so that's homes got that one so let me ask real quick any other questions related to acl assessments um i would like to iterate uh my answers my last one regard they're all so i think there are there are more questions regarding the role so i don't know who asked but the question was if i have ascend read role as required to as required to view the record to who should they add the role in order to allow this user to continue seeing the record so in such case you need to add if you want to add that sm read to the relevant report view acl that appear as block so if you add that role as and read as part of the required roles and run the scan again then the report shouldn't appear as effective and the users will be able to view continue okay and and robert is saying uh that the assessment is saying they need idle and we don't want to give them give that to them or the report table so is is up somewhere the report it's not actually saying you need items the report says hey if you want to view the report you have item but it's not only like um you can add there are other options that ma as mata like displayed in the one of uh the like the ppt's where you can either add item yes as everything that goes missing or you can play with the roles that they are related to the report ucl and add new role that you create and then you can bypass the license application yeah so far like on the dashboard we display the facts and then from there admins need to use their experience and decide how they can move forward [Music] with those facts and there are like few options follow up on that for me is so would it be fair to say then that the reason that they're seeing or that they seeing the need for itil that i put need in air quotes is that that's what was required already on that report but you could change that particular report and add additional roles not on the report on the report yeah okay yeah so affected users are being extracted from the the users that the report shared with and those that won't be able to see the report anymore if we activate the ripple viewers here and then what you see as required roles are the roles that need to give the user based on those acls and of course you can add more roles to the ripple user and then you can bypass the fact or can bypass the option of adding item to user because i can understand it'll have license application it can give more like uh power to the user but yeah as i said it's not any users going to use this app it's admin who has security admin so they should have certain level uh of knowing the platform and how things work and then they can decide whether they want to give either role or ignore or i don't know add specific role to users or just add the new role to uh to the ripper dsl or even like update the sharing audience of that report okay great so hey marta with you um um i'm sorry your screen being shared is it possible that you could show the story app real quick a question did come in says okay startup is a new term for my for me related to limited servicenow experience but i'll certainly try to browse through that so maybe we just show quickly what that is absolutely i also i didn't have the quick link but we can switch for it immediately here we go awesome thank you and uh just to confirm without this app installed you can see information displayed on reports based on data you should not have read access if so is that only true for pa or any reports i think we're just talking about reports it's not related only to pa yeah it's it's all your reports and it's also uh without this app doesn't necessarily mean that people are seeing data that they should not have read access so that all depends if you have reported uals already enabled or not it depends from instance to instance situation situation and also like uh from when you have started using but these uh application gives you a way to check uh what are the currently users so that if you need to enable more report view sells than what who can be who will be impacted we just want to emphasize that the ripple uscl is important that the customers to have them and i think the servicenow has planned to force them to all the customers so the app came in place in advance in order to allow the customer to see which use is going to be affected and tried to remediate it before those acls being activated so it can prevent influx of incidents that the customers will receive from users that no longer be able to see the wrapper which is good because the whole idea is to make sure that only people who are supposed to see that apple to be able to see it not only from the record view but also like uh on database level and which coming that's part of that was here okay great just waiting here okay okay so it looks like we have some other some other questions coming here so let's see if we can um attack these real quick let me share my screen here anyone on the panel is more than welcome to answer these okay we have one more here coming on acls let's get that one first so sorry one more time if we had reports that users were able to see prior to running the assessment and now it says blocked by table a sale roles sn request read add read admin inventory user idle how can we get this to work for them and yeah so you need to add one of those blocking roles to the users and then we'll be able to see now running the scan will not affect anything right now but once you click on the activate acls then what the scan shows shows you will happen so as you say like this can prevent or give you idea what will happen if those ripple view is cells that are not active in your instance right now and like what will happen if you activate them so the scan shows you what you need to be to do but if you want to see that effects you need to activate those sales so yeah the app will allow them allow customers to activate those sales in advance and see like their side effects okay great [Music] yeah so one of the questions that we'd come up earlier that i wanted to make sure to talk about was there are a few um depending on your licensing so like that and that may be part of the confusion um so if you're licensed and i think the majority of our licenses are based off of like fulfillers like i t like our itsm pro csm pro type licenses so in those situations like with this security you need a user with a role uh but it doesn't necessarily have to be one of those roles that trigger a license if that's the way you're licensed in some of like the longer kind of more legacy skus where it's literally a per user license like if you're getting charged per rolled user then yeah this could end up actually causing you to have to use more seats if you're trying to share the report with a user that doesn't have a role in the system your other option may be to publish it to a portal that doesn't require a sign-in or even make it available to sharepoint with an iframe great thanks josh yeah all right so um and one of them can running the scan be scheduled uh especially if you have thousands of reports and you don't want to take a chance of impacting prod is that something that can be scheduled or is it on demand only it's on demand the way that was delivered okay so maggie what i would say uh really great idea hit up the community and go to the ideal portal and put that in and we'll get some some eyes around that and maybe in a future release that's something that can be um can be done but currently as it stands it is an on-demand thing all right so yep no problem okay so uh let's get to these see what we can do with these two questions here so um and anybody again can can answer this if they want to is it possible to limit the records for both a report widget and a pa widget on the same dashboard using the same filter so just kind of a follow-up question for me are are you asking uh can you make sure that if um and and first of all you have to make sure that a uh interactive filter acts as a breakdown in order for it to work for the both of them but are you asking that you you want to limit the amount of results on both a report and a widget based off of a result that is selected in a filter is that your question um and if anybody else wants to to chime in on that i i don't i don't know that there i know that there's properties for how many results can be you know displayed from results i just don't know that it can be driven um by a result now you could always probably do some custom stuff that could maybe do something like this but i don't know if anybody that's on the panel has ever heard of doing anything like this or even has any ideas around it and i guess that is what they're looking for so based on what result was selected in um a filter breakdown so and so forth then tell it to only bring back so many results anybody again i i didn't i don't know that i have ever um heard of that either what i would suggest anonymous is that's a really good ques uh question for our community and there may be uh other customers that have had that same question that maybe has already been answered or uh they may have the answer as well because there's very knowledgeable customers that are out there uh i just don't know of anything off the top of my head that would be simplistic enough that you could kind of do it on the fly without there being some customization there that would uh have to happen yeah and that's kind of why i steered away from that one as i wasn't 100 sure what they were asking yeah if you're if you're asking like can you use a filter essentially like for both for both of like a like a report pie chart and a line graph in pa or a score npa to apply them the same like like tom said there is you can apply as you can apply an interactive filter as a breakdown in certain cases if you're looking at like if you have a list view of report like uh like of incidents at the bottom and you're trying to filter that based off of a list that's kind of a whole different thing and then the other question is i i am not a hundred percent sure how this all works in the new you know dashboard ui builder so yeah again i think that that's probably a really good question for the community and apologize that we couldn't give you the answer we're looking for just i've never had that that question asked and it would it would take some time rather than trying to do it you know off the cuff now but i think if you could ask the question in the community it would probably did you drive some good direction on that we we definitely are moving towards the same filter and unified filter experience when we are now um rebuilding the experiences of uh dashboards and that visualizations to have a more consistent ux and like experience all together uh but um don't know if it's possible for the for the current efforts yeah and i did think about that knowing what's what is you know uh in the future uh but even still with that i don't i don't know that it in its current state or wherever however it's going to be released you can you can decide or limit results even though it's the same potential same filter though right marga oh yeah yeah okay all right so chris has a question here so i have a widget question i have a widget that is using a time series of by month average and the widget is set to show monthly data from 1 1 to 12 31. usually this leaves the future months visible but empty but on this one it only shows the months with data no future months is that a limitation of such a time series can i change it i know showing empty months is unusual but there is a reason psy i usually have the uh especially if it's pa we have uh average the plus the one that have the plus at the end and uh those ones show also the not yet ended or finished months but it doesn't show it empty though right doesn't it it just it doesn't it doesn't average for those yeah yes yeah yeah if it doesn't let it's not empty at that point so it's like if it's just by average uh then it will it should cut the even the visualization so like the the data the data that you see you should not see for example july in this case because july is still in progress but then if you use the time series that at the end have the plus uh signed then you will also get the data uh from july and then you will not see empty anymore the chart for july and it sounds like chris is saying that they would like to see that or so yeah because i want to say instead of just through july i want to see the empty months of august september october and november so all the that's i think the only trick to see it say it's probably triggering the forecaster that's all i can think of as well because i think by you know for pa there has to be a score in the scores table right for it to be able to extend so i'm interested in the scenario where you are seeing those extra those extra empty months because i don't think that's normal it's almost like a display thing more than just a results thing it's like recognizing that i've selected you know january 1st through december 1st and even though there's no data i still want you know think about think about from a legend perspective right i i still want to see the months in the year even though that i have no data and i think that that's what he's trying to uh accomplish just just to see the month names so it i think it's more a display thing than actual result driven it just kind of just knows from whatever time frame you put in there that i'm going to still give you at least the names of those months knowing that they're still empty yeah and to kind of expand and go forward from what dan said you know it tries to show whatever it has a score for right so you can force it by going into those months in your scoresheet and putting in zeros but like i've had a conversation with a customer before where i'm trying to explain that like when you see a zero it should typically mean that there was a measured zero not just an absence of data and so it if you need like if there's no other way then you can basically trick it into showing those months by adding zeros potentially but at the same time it's a little misleading because it's like you know i don't know there's there's a difference between like having zero errors and then having an absence of errors that means that you haven't counted yet right yeah and you don't want to use you don't want to do any sort of averaging because now you're increasing the account from the for the division perspective and that's going to skew your number so if you understand what you're doing like josh said when you go in there and put zeros but let's say for example you did that the average plus then understand that what you're going to be displaying is not going to be accurate because now you're taking rather than dividing by 6 which is or 7 since we're in july you'd be dividing by 12 because you have 12 months of results even though it's just a zero so that's going to excuse stuff for you just spread lightly on that yeah and six of them are now zero so right so what used to be a really good score of 95 now you just you know we all remember being in school so you know yeah the training i mean won't work anymore yeah so chris i think even with your your question i think it's another great question to put into the community there there may be somebody else that's already done that um but yeah i like i like your response there chris thanks y'all but i'm not messing with the score sheets good answer i think that's a wise choice there uh but ask that question in the community as well maybe maybe somebody out there has figured out uh a means of doing something like that um in order to show what you're what you're trying to look for so awesome i'll i'll look for that question as well i want to see if anybody does answer that so okay uh we've got about six minutes left so i don't see any other questions so we'll kind of wrap things up marta thank you again um really good information and you know now this is going to be a great resource for us to share with other people that have this question uh in the community so i really appreciate your help and also tim i i appreciate you uh joining as well and and jumping in where you needed to and of course all the other panelists as well so real quick just kind of go over some logistical things here at the end um maybe here's my there we go all right so again we just talked about the community so make sure that you're checking it out go here and ask questions also you can get a lot of other great information this will be out uh in the community later on this evening or this afternoon and also out on youtube you'll have the links for all of that stuff inside of the community event make sure that you're utilizing now learning um there's always new stuff that's coming out that's out there uh type in analytics for everything that's related to analytics to help you get there quicker and the pa advanced course as we've been talking about is now on demand it's not a classroom required anymore so you can uh do that now and uh always be aware that there's other really great platform or academies that are out there platform academy virtual agent process optimization which we had a call two weeks ago that talked about this now there is an actual uh community that that talks about all these things so that's great and also a mobile app so make sure that you're checking those out uh and thank you as usual we always appreciate everyone attending and being interactive with us and once again thank you to marta for her time for present uh doing the presentation and demo and also that's him for being here and all the other panelists so have a great day we'll see you in two weeks