Programs Access Control Tab

Use this tab to grant access to a program for groups or individual users.

When a user is granted access to a program, they can see the selected program but they cannot automatically see any of the associated projects. If you want them to have access to one or more of the associated projects, you must add them to the Project Access Control List grid (Hubs > Projects > <display project in Detail View> > Access Control tab.

Note: Only users and groups that have been set up in EPM Security Administrator and assigned a named license display in the drop-down fields on this tab.

To edit these fields, you must be one of the following:

• The program owner
• A member of the SYSADMIN group
• A member of a group or a user that has been assigned the OWNER-DELEGATE role

For a description of the fields and menus above the tabs, see Programs Common Fields.

Field

Description

Owner

This is the name of the program owner and is only editable on this tab. The name that displays is from the EPM Security Administrator (EPM SA) User General tab First Name and Last Name fields for the owner. If those fields are blank, it displays the EPM SA User ID name for the owner. It is a read-only field in the Program's List view. Only the owner and a member of the SYSADMIN group can edit this field. In edit mode, you can select a different name from the drop-down list. The list includes all users who have been assigned a named license in EPM Security Administrator. When you make a copy of a program, you become the owner and this field changes to your First Name + Last Name or User ID.

Access Control List

Use this grid to assign access to individual users and to groups. The grid header includes the following icons:

• : Click Filter in the grid header to filter the grid results. The grid updates to display the records that fit the criteria that you enter. A filter icon displays to the left of the column name to indicate that you are filtering by a value in that column. To hide the filter fields, click Filter again. To remove the filter criteria, delete the text from the filter field. The filter remains in effect as long as you are in that view. However, if you leave the view and then return, the filter is no longer in effect.
• : Click the Export icon to download all data in the grid to a .csv file.

Field	Description
User	This list is sorted alphabetically by first name and includes all users who have been assigned to a named license. The list includes first and last name and user ID in parentheses. Select the user to whom you want to grant access. When you select a user, the Group column is disabled.
Group	This list includes all groups listed in EPM Security Administrator and is sorted by group description. Select a group to whom you want to grant access. When you select a group, the User column is disabled.
Role	This list includes all roles listed in EPM Security Administrator and is sorted by role description. This is an optional field. If you do not select a role, Touchstone will use the user's/groups Primary Role specified in EPM Security Administrator. The OWNER_DELEGATE role gives a user or a member of a group the same rights as the owner, including the ability to edit the access control information. It does not allow the user or group member to change the owner.
Read Only	Select this check box if you want to limit the user or group to read-only access. When a user or group is assigned the OWNER_DELEGATE role, you cannot make their access read-only.
+ Add Row	Click to add a new row to the grid.
X (Delete)	When you hover over a line in the Access Control List grid, an X displays on the right side of the line. Click the X to remove the user or group from the list. The user or group will no longer have access to the program.