Appendix A

Objectives

Budgeting & Planning Security Summary
Budgeting & Planning Security Controls

B&P Security Summary

ORG Context	User with ORG Privilege — Rights based on Security Org	User with ORG Privilege — Rights based on Special Org Reporting Rights	User with PROJ Privilege — Rights based on Mgr assigned in ERP	User with PROJ Privilege — Rights based on Add Project Level Reporting	Security Modifiers
Summary Financial Reporting	User's Security Org and lower	Delegated Org and lower			Alternate Menu
Employee Utilization	User's Security Org and lower	Delegated Org and lower			Alternate Menu
Indirect Rate Analysis	User's Security Org and lower	Delegated Org and lower			Alternate Menu
Detail Reporting	User's Security Org and lower	Delegated Org and lower			Alternate Menu & Labor Suppress
Supplemental Reports	User's Security Org and lower, typically	Delegated Org and lower, typically			Alternate Menu
Org Budget/Outlook Origination	User's Security Org and lower and assigned as Approver or Manager	User's Security Org and lower and assigned as Approver or Manager			Alternate Menu
Org Budget/Outlook Approval	User's Security Org and lower and assigned as Approver	User's Security Org and lower and assigned as Approver			Alternate Menu
Staff Available for Org Budget	Employees whose home Org is under User's Security Org, or at same level and branch	Employees whose home Org is under Orgs delegated to User, or at same level and branch

PROJ Context	User with PROJ Privilege — Rights based on Security Org	User with PROJ Privilege — Rights based on Special Org Reporting Rights	User with ORG or PROJ Privilege — Rights based on Mgr assigned in ERP	User with ORG or PROJ Privilege — Rights based on Add Project Level Reporting	Security Modifiers
Top Level Project Reporting	Top Level reports of Projects owned by Orgs at User's Security Org	Top Level reports of Projects owned by Delegated Orgs	Top Level reports of Projects the User is the Manager of	Top Level reports of Projects Delegated to the User	Alternate Menu
Level Down Project Reporting	Projects owned by Orgs at User's Security Org and lower, plus all children, plus parents of those projects	Projects owned by Delegated Orgs and lower, plus all children, plus parents of those projects	Projects the User is the Manager of, plus all children, plus parents of those projects	Projects Delegated to the User, plus all children, plus parents of those projects	Alternate Menu
Active Level Project Reporting	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	Alternate Menu & Labor Suppress & Project Exclude Rights
Detail Reporting	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	Alternate Menu & Labor Suppress & Project Exclude Rights
Supplemental Reports	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	Alternate Menu & Labor Suppress & Project Exclude Rights

PROJ Context	User with PROJ Privilege — Rights based on Security Org	User with PROJ Privilege — Rights based on Special Org Reporting Rights	User with ORG or PROJ Privilege — Rights based on Mgr assigned in ERP	User with ORG or PROJ Privilege — Rights based on Add Project Level Reporting	Security Modifiers
Project Budget/EAC Origination	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	Alternate Menu & Project Exclude Rights
Project Budget/EAC Approval	Projects owned by Orgs at User's Security Org and lower, plus all children, where User is assigned Approver	Projects owned by Delegated Orgs and lower, plus all children, where User is assigned Approver	Projects the User is the Manager of, plus all children, where User is assigned Approver	Projects Delegated to the User, plus all children, where User is assigned Approver	Alternate Menu & Project Exclude Rights
Staff Available for Project Budget/EAC	Employees whose home Org is under User's Security Org,	Employees whose home Org is under Orgs delegated to User	Employees whose home Org is under User's Security Org,	Employees whose home Org is under User's Security Org,	Project Mgr Matrix Rights & Project Workforce

B&P Security Controls

User Logon Setup and Maintenance: Available to B&P Administrators and Admin users. Administrators can manage all users. Admin users can manage those users whose Home Org falls under their Security Org.

Key Security Fields:

Privilege (PROJ/ORG/ADMIN) — Controls which contexts are available to the user. PROJ users can only see the PROJ context. ORG users can see the PROJ and ORG contexts. ADMIN users can see the PROJ, ORG, and ADMIN contexts.
Security Org — Can be assigned at any level of the Org structure. Primary control of Org visibility for ORG users. Controls staff available for PROJ users when using the budget functions.
Labor Suppress (Y/N) — When set to Y, the user will not be able to see raw labor costs by employee. When set to N, all cost information is visible.
Alt Menu (Y/N) — When set to Y, the user's menu choices will be limited to those selected by the Administrator using the Alt Menu setup. When set to N, the user will see all Budgeting & Planning menu choices.

Special Organization Reporting Rights (COM2, MA07, BOM2) — Available to Administrators, Admin and Org users. Administrators can delegate rights to any org level for all users. Admin users can delegate rights to any org they have rights to see for users whose Home Org falls under the Admin user's Security Org. Org users can delegate rights to any org they have rights to see.

Rights granted through the Special Organization Reporting Rights option supplement the rights an Org user has based on their Security Org. These additional rights increases the orgs listed in the Organization Navigation list boxes, as well as the Projects listed in the Project Navigation list boxes. The additional rights also expand the staff available to use in the drop-down list in the Project Budget tool.

Org Budget Approvers/Managers (MA03) — Available to Administrators and Admin users. Users set up as an Org Budget Approver can approve budgets for any org that falls under the org for which they are setup as an approver. They can also create budgets at any lower level org that fall under the org for which they are setup as an approver.

Org Budget Managers are usually assigned at the lowest level of the org. Users set up as an Org Manager can create Org Budgets for orgs for which they have been set up as Manager.

Project Mgr Assignment in ERP — By default, both Org and Proj users have rights to see projects they have been assigned as the Project Manager for in Costpoint or GCS Premier. They have full rights to any tasks below the level where they have been set up as Manager. The user also has partial rights to parent levels of the projects they manage.

Additional Project Level Reporting (CPM2, CPM3) — Available to all Org and Project users. Existing Managers with full rights to a project can delegate reporting rights to any other user. Once a user has received reporting rights, they can then also delegate rights to other users.

The reporting rights grant visibility to view pages related to those projects, as well as budget creation rights to those projects. Additional Project Level Reporting Rights supplement the list of projects available to a user as defined by the other project rights mechanisms.

Alternate Menu Setup (MAU12) — Available to the Administrators and Admin users. For users who are set up with Alt Menu = Y, the Administrator can specifically define which menu choices will be available to that user.

Project Exclude Rights (MAP10) — Available to Administrators and Admin users. Allows the administrator to identify specific projects that should not be seen by specific users. These rules act as a final modifier to the Project rights created based on all other Project Rights mechanisms and removes the identified projects from the user's Navigation, preventing visibility into any details for that project and all children of that project.

Project Mgr Matrix Rights (MAP9) — Available to Administrators and Admin users. Allows administrators to identify staff that should be available to a user for Project budgeting purposes, based on Home Org, in addition to the users rights based on their Security Org.