EPM Security Administrator

The Deltek EPM Security Administrator (EPM SA) is shipped with Acumen Touchstone and is a security tool that the Touchstone Administrator can use to define and manage licenses and security.

The Touchstone security features enable the System Administrator to grant or restrict access to views and processes in Touchstone. To define rights to the application, the System Administrator uses EPM SA to create user "roles" that reflect your organization's business rules. The System Administrator then assigns each user or a group of users to a role.

EPM SA allows you to define the security rights for all EPM applications, such as Touchstone, PM Compass, Cobra, and Open Plan. These applications offer different options but they all follow the same premise.

Security uses the most permissive access. For example, if a user has read-only access to a project but is a member of a group that has full access to the same project, the user will have full access.

You use the EPM SA to perform several tasks, such as:

  • Define groups and users
  • Define roles and permissions
  • Disable or enable user logins
  • Terminate current sessions in Touchstone
Note: For detailed information about setting up security in EPM SA, see the EPM Security Administrator help.

Named and Submitter Licenses

Touchstone includes both Named and Submitter license types.
  • A Named license is a license purchased for each individual's exclusive use. It has access to the full functionality of the product but does not allow more users to be assigned to the license than the license allows.
  • A Submitter license is similar to a named user license in that it only allows the licensed number of users to be assigned to the license; however, it does not have access to the full functionality of the product. This license only gives the user access to the Submittals hub so that they can submit schedules for projects to which they have been assigned.

Roles in EPM SA

In EPM SA, you create roles that specify access to certain areas of Touchstone. These roles define the type of operations a user can perform, such as submit schedules, add projects, create templates, and set reporting periods. When you create a user, you assign them to a role. For example, if you disable Settings for a role, the users assigned to that role won't see the Settings group in the Touchstone Navigation pane.