Budgeting and Planning Security

B&P Security Summary

ORG Context	User with ORG Access — Rights based on Security Org	User with ORG Access — Rights based on Special Org Reporting Rights	User with PROJ Access — Rights based on Mgr assigned in ERP	User with PROJ Access — Rights based on Add Project Level Reporting	Security Modifiers
Summary Financial Reporting	User's Security Org and lower	Delegated Org and lower			User Security Groups
Employee Utilization	User's Security Org and lower	Delegated Org and lower			User Security Groups
Indirect Rate Analysis	User's Security Org and lower	Delegated Org and lower			User Security Groups
Detail Reporting	User's Security Org and lower	Delegated Org and lower			User Security Groups & Labor Suppress
Supplemental Reports	User's Security Org and lower, typically	Delegated Org and lower, typically			User Security Groups
Org Budget/Outlook Origination	User's Security Org and lower and assigned as Approver or Manager	User's Security Org and lower and assigned as Approver or Manager			User Security Groups
Org Budget/Outlook Approval	User's Security Org and lower and assigned as Approver	User's Security Org and lower and assigned as Approver			User Security Groups
Staff Available for Org Budget	Employees whose home Org is under User's Security Org, or at same level and branch	Employees whose home Org is under Orgs delegated to User, or at same level and branch

PROJ Context	User with PROJ Access — Rights based on Security Org	User with PROJ Access — Rights based on Special Org Reporting Rights	User with ORG or PROJ Access — Rights based on Mgr assigned in ERP	User with ORG or PROJ Access — Rights based on Add Project Level Reporting	Security Modifiers
Top Level Project Reporting	Top Level reports of Projects owned by Orgs at User's Security Org	Top Level reports of Projects owned by Delegated Orgs	Top Level reports of Projects the User is the Manager of	Top Level reports of Projects Delegated to the User	User Security Groups
Level Down Project Reporting	Projects owned by Orgs at User's Security Org and lower, plus all children, plus parents of those projects	Projects owned by Delegated Orgs and lower, plus all children, plus parents of those projects	Projects the User is the Manager of, plus all children, plus parents of those projects	Projects Delegated to the User, plus all children, plus parents of those projects	User Security Groups
Active Level Project Reporting	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	User Security Groups & Labor Suppress & Project Exclude Rights
Detail Reporting	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	User Security Groups & Labor Suppress & Project Exclude Rights
Supplemental Reports	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	User Security Groups & Labor Suppress & Project Exclude Rights

PROJ Context	User with PROJ Access — Rights based on Security Org	User with PROJ Access — Rights based on Special Org Reporting Rights	User with ORG or PROJ Access — Rights based on Mgr assigned in ERP	User with ORG or PROJ Access — Rights based on Add Project Level Reporting	Security Modifiers
Project Budget/EAC Origination	Projects owned by Orgs at User's Security Org and lower, plus all children	Projects owned by Delegated Orgs and lower, plus all children	Projects the User is the Manager of, plus all children	Projects Delegated to the User, plus all children	User Security Groups & Project Exclude Rights
Project Budget/EAC Approval	Projects owned by Orgs at User's Security Org and lower, plus all children, where User is assigned Approver	Projects owned by Delegated Orgs and lower, plus all children, where User is assigned Approver	Projects the User is the Manager of, plus all children, where User is assigned Approver	Projects Delegated to the User, plus all children, where User is assigned Approver	User Security Groups & Project Exclude Rights
Staff Available for Project Budget/EAC	Employees whose home Org is under User's Security Org,	Employees whose home Org is under Orgs delegated to User	Employees whose home Org is under User's Security Org,	Employees whose home Org is under User's Security Org,	Project Mgr Matrix Rights & Project Workforce

B&P Security Controls

The User Logon Setup and Maintenance feature is available to B&P Administrators and Admin users. Administrators can manage all users, and Admin users can manage those users whose Home Org falls under their Security Org.

Key Security Fields:

Security Org — Can be assigned at any level of the Org structure. Primary control of Org visibility for ORG users. Controls staff available for PROJ users when using the budget functions.
Labor Suppress (Y/N) — When set to Y, the user will not be able to see raw labor costs by employee. When set to N, all cost information is visible.
Roles (Administrator) — When checked, the Administrator Role allows access to certain applications in the Administration context. This can be limited by User Security Group.
Roles (Accountant) — When checked, the Accountant Role allows a user to transfer data to Costpoint using the Costpoint Revenue Analysis application.
Security Group — This field displays all the User Security Groups that can be assigned to an employee. The User Security Group can provide application level security for groups of employees.

Special Organization Reporting Rights (COM2, MA07, BOM2)

Special Organization Reporting rights are available to Administrators and Admin. Administrators can delegate rights to any org level for all users. Admin users can delegate rights to any org they have rights to see for users whose Home Org falls under the Admin user's Security Org. Org users can delegate rights to any org they have rights to see.

Rights granted through the Special Organization Reporting Rights option supplement the rights an Org user has based on their Security Org. These additional rights increases the orgs listed in the Organization Navigation list boxes, as well as the Projects listed in the Project Navigation list boxes. The additional rights also expand the staff available to use in the drop-down list in the Project Budget tool.

Maintain Org Budget Approver/Managers (MA03)

Available to Administrators and Admin users. Users set up as an Org Budget Approver can approve budgets for any org that falls under the org for which they are setup as an approver. They can also create budgets at any lower level org that fall under the org for which they are setup as an approver.

Org Budget Managers are usually assigned at the lowest level of the org. Users set up as an Org Manager can create Org Budgets for orgs for which they have been set up as Manager.

Project Manager Assignment in ERP

By default, both Org and Proj users have rights to see projects they have been assigned as the Project Manager for in Costpoint or GCS Premier. They have full rights to any tasks below the level where they have been set up as Manager. The user also has partial rights to parent levels of the projects they manage.

Additional Project Level Reporting (CPM2, CPM3)

Existing Managers with full rights to a project can delegate reporting rights to any other user. Once a user has received reporting rights, they can then delegate rights to other users.

The reporting rights grant visibility to view pages related to those projects, as well as budget creation rights to those projects. Additional Project Level Reporting Rights supplement the list of projects available to a user as defined by the other project rights mechanisms.

User Security Groups (MAU12)

Available to the system Administrators and Admin users. The User Security Group feature enables you to create separate menus for a single user or group of users.

Maintain Project Exclude Rights (MAP10)

Available to Administrators and Admin users. Allows the administrator to identify specific projects that should not be seen by specific users. These rules act as a final modifier to the Project rights created based on all other Project Rights mechanisms and removes the identified projects from the user's Navigation. This prevents visibility into any details for that project and all children of that project.

Add Project Manager Matrix Rights (MAP9)

Available to Administrators and Admin users. Allows administrators to identify staff that should be available to a user for Project budgeting purposes, based on Home Org, in addition to the users rights based on their Security Org.