Costpoint Analytics security enables you to control access to the following:
|
In this topicProject Data Access Based on Project Manager
|
When you run Costpoint Analytics, the only tabs displayed are those to which you are granted access through your user group. You may have access to all analytics tabs or only to a limited set of them.
When you run Costpoint Analytics, you can only display data for the set of organizations to which you are granted access in Costpoint Analytics security.
When you view project data based on owning organization on the Summary Dashboard or in the Revenue Analytics, Profit Analytics, Backlog Analytics, and Projects at Risk Analytics, you can view and analyze all data for projects that are owned by the organizations to which you have access.
Whether or not access to an owning organization automatically extends to lower-level organizations in the organization hierarchy depends on how you set up Costpoint Analytics security. When you grant access to an organization, you also have the option to grant access to all lower-level organizations below that organization in the hierarchy.
If the owning organization for a project changes, Costpoint Analytics always bases access to that project’s data on the most recent owning organization.
For example, organization 1.1 was the owning organization for a project initially but later organization 1.2 became the owning organization.
A Costpoint Analytics user with access rights to organization 1.2 but not to 1.1 can analyze all of that project’s data when viewing the analytics by owning organization, including data for the period that 1.1 was the owning organization.
In contrast, a user with access rights to organization 1.1 but not to 1.2 has no access to the project’s data, including data for the period that 1.1 was the owning organization.
When you view project data based on performing organization in the Revenue Analytics or Profit Analytics, you can only view and analyze project data originating from transactions that were charged to the organizations to which you have access.
The option to view data based on performing organization does not apply to the Summary Dashboard, the Backlog Analytics, or the Projects at Risk Analytics. Data in those analytics is always based on owning organization.
Whether or not access to a performing organization automatically extends to lower-level organizations in the organization hierarchy depends on how you set up Costpoint Analytics security. When you grant access to an organization, you also have the option to grant access to all lower-level organizations below that organization in the hierarchy.
Organization access for the Labor Utilization Analytics is based on either employees’ home organizations or their security organizations. You select one of these options in Costpoint Analytics – Employee Configuration.
In either case, when you view data in the Labor Utilization Analytics, you can view and analyze all cost for an employee if you have access to that employee’s home or security organization.
If an employee’s organization (home or security organization, whichever Costpoint Analytics access is based on) changes, Costpoint Analytics always bases access to that employee’s data on the most recent organization.
For example, organization 1.1 was the home organization for an employee initially but later organization 1.2 became that employee’s home organization.
A Costpoint Analytics user with access rights to organization 1.2 but not to 1.1 can analyze all of that employee’s data, including data for the period that 1.1 was the home organization.
In contrast, a user with access rights to organization 1.1 but not to 1.2 has no access to the employee’s data, including data for the period that 1.1 was the home organization.
The set of organizations to which you have access in Costpoint Analytics also determines the filter options available to you.
For example, if you view project analytics by owning organization and a project manager has no projects that are owned by the organizations to which you have access, that manager does not appear in the list of possible filter values in the Project Manager filter list.
As you work with the analytics, you have the option on the User Options tab to view data based on your firm’s organization structure or on any of the reorganization structures established in Costpoint.
When you view and filter analytics based on reorganizations, your access to data is based on your access to the organizations represented by the reorganizations. As a result, if you have access to some of the organizations making up a reorganization but not to all, the data available to you for that reorganization is likely to be incomplete.
For example, you have access to data for organizations 1.1 and 1.2 in Costpoint Analytics. You decide to analyze data for reorganization A.1. Organizations 1.1, 1.2, and 1.3 are linked to that reorganization. Because the data you can view is restricted by your organization access, the reorganization A.1 data available to you for analysis includes data for organizations 1.1 and 1.2 but does not include data for 1.3.
For Costpoint Analytics users that are subject to project manager security, access to project data in the project analytics (Revenue, Profit, Backlog, and Projects at Risk) is limited to his or her own projects or, if the user is a program manager, the projects assigned to those project managers.
For a more complete description of project manager security, see Project Manager Security: Key Concepts and related topics.
The Revenue tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or REVENUE on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
When you view data based on owning organization in Revenue Analytics, you can view and analyze all data for revenue-level projects that are owned by the organizations to which you have access. Your access includes the ability to analyze revenue generated by those projects even if the revenue, at the transaction level, is charged to an organization for which you do not have access rights.
When you view data based on performing organization in Revenue Analytics, you can only view and analyze revenue from transactions charged to the organizations for which you have access. Thus, if you have access rights for some of the performing organizations for a project but not all, the revenue data available to you in Costpoint Analytics for that project may not be complete when you view it based on performing organization.
The Profit tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or PROFIT on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
When you view data based on owning organization in Profit Analytics, you can view and analyze all profit data for revenue-level projects that are owned by the organizations to which you have access. Your access includes the ability to analyze profit generated by those projects even if the revenue and expenses, at the transaction level, are charged to organizations for which you do not have access rights.
When you view data based on performing organization in Profit Analytics, you can only view and analyze profit data from transactions charged to the organizations for which you have access. Thus, if you have access rights for some of the performing organizations for a project but not all, the profit data available to you in Costpoint Analytics for that project may not be complete when you view it based on performing organization.
The Backlog tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or BACKLOG on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
When you view data in Backlog Analytics, you can view and analyze all backlog data for revenue-level projects that are owned by the organizations to which you have access. Your access includes the ability to analyze backlog for those projects even if the revenue, at the transaction level, is charged to an organization for which you do not have access rights.
The option to view analytics by performing organization does not apply to Backlog Analytics.
The Projects at Risk tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or PAR on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
When you view data in Projects at Risk Analytics, you can view and analyze all risk data for risk-level projects that are owned by the organizations to which you have access. (“Risk-level projects” for billing-based risk reasons are billing-level projects. For all other risk reasons, they are revenue-level projects.) Your access includes the ability to analyze risk for those projects even if the billing, revenue, or expenses, at the transaction level, are charged to organizations for which you do not have access rights.
The option to view analytics by performing organization does not apply to Projects at Risk Analytics.
The AR and DSO tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or AR_DSO on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
When you view data based on owning organization in AR and DSO Analytics, you can view and analyze all AR and DSO data for top-level projects that are owned by the organizations to which you have access.
The option to view analytics by performing organization does not apply to AR and DSO Analytics.
The Ad Hoc Data Discovery tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or PROJECTS_AHDD on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
Which dimensions display in the Ad Hoc Data Discovery table is controlled by the same security settings that control your access to data on the other analytic tabs. For example, the organization access that your system administrator sets up for your Costpoint Analytics user role determines the organizations for which you can view metric values in the table.
Which metric values display in the Ad Hoc Data Discovery table is controlled by the tab security settings that control your access to the other analytic tabs. If you select a metric associated with a tab to which you do not have access, the table does not display data for that metric. For example, if you select one of the backlog metrics but you do not have access to the Backlog tab, the table does not display data for that backlog metric.
The Labor Utilization tab in Costpoint Analytics – Employee is only available to members of user groups for which either ALLTABSACCESS or LU on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
When you view data in Labor Utilization Analytics, you can view and analyze labor utilization data for employees whose home or security organizations, whichever you base security on, are among the organizations to which your user group has access.
In addition, if LABORCOSTACCESS for your user ID in the USERS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx contains N, you cannot view labor cost data, and you do not have the option to calculate labor utilization rates based on labor cost.
The Summary Dashboard tab in Costpoint Analytics – Summary is only available to members of user groups for which either ALLTABSACCESS or SUMMARY on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
In addition, access to the individual summary analytics on the Summary Dashboard tab are subject to any access restrictions for the corresponding detailed analytics tabs, as described above. For example, if you do not have access to the Profit tab in Costpoint Analytics – Project, the summary profit analytics are not displayed on the Summary Dashboard tab. Costpoint Analytics also enforces organization access when it displays organizations in the Org filter lists on the Summary Dashboard tab and calculates summary data.
If a user is not allowed to view labor cost in the detailed Labor Utilization Analytics, the option to view summary labor utilization data based on labor cost on the Summary Dashboard tab is not available.
The User Options tabs in Costpoint Analytics – Project, Costpoint Analytics – Employee, and Costpoint Analytics – Summary are only available to members of user groups for which either ALLTABSACCESS or USEROPTIONS on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.
In addition, security applied to other tabs can affect the user options that are available on the User Options tabs:
If a user group does not have access to the Profit tab, the Profit Type options are not displayed.
If the user group does not have access to the Revenue tab or Profit tab, the Org View options are not displayed.
If QVACCESS for a user ID in the USERS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains ADMIN, that user can create new analytic objects and new tabs within Costpoint Analytics. If QVACCESS contains USER, they cannot add objects or tabs.
Be aware that users with ADMIN in QVACCESS can create objects that display any data that is available in Costpoint Analytics. You cannot give access to some data items and deny access to others.