Organizational security provides a means for users to enforce security at the organizational level. The primary purpose of organizational security is to prevent unauthorized reporting or inquiry on organizations, not to prevent transaction entry. This feature is enabled on a system-wide basis and is optional. If the existing screen rights security is more restrictive, the existing screen rights security supersedes organizational security. You can create "Organizational profiles" that either grant or deny access to the organizations listed. You then assign these profiles to org security groups by module. At this level, disabling org security by application within modules can further refine the security. You then assign each individual user to an Org Security Group in the Maintain Users screen. After all setup is completed, you can run the Update Org Security Profiles process; this will create an Org Security Lookup table. This table will reduce processing time when organizational security is in effect.
"Project security" and "employee security" are implied by organizational security. For example, if you have rights to the owning org of a project, you will have rights to all the information relating to that project, as long as you also have access to all the screens necessary to obtain that information. Similarly, if you have rights to an employee's home organization, you will also have rights to all information about that employee, as long as you have access to the necessary information screens. Keep in mind that you can set labor suppression individually by user.
You can activate organizational security in the System Settings screen in Costpoint System Administration. This is a system-wide setting and will therefore apply to all users. However, you can establish an organizational profile and an org security group that will effectively override organizational security. This will in effect remove org security for users assigned to that org security group. If you implement org security after the Costpoint system is already "live," you may want to check the Org Security checkbox in this screen after Org Profiles and org security groups have already been established and assigned. To select this checkbox beforehand would interrupt processing.
Org Security Profiles are groups of organizations to which you are granted or denied access. This feature is particularly useful for entities that run multiple companies in one database.
For example, if organizations beginning with "01" represent the Washington division and organizations beginning with "02" represent the California division, you could set up a profile of "01" using a "begins with" relation method. This profile would allow access to any organizations beginning with "01." It would also prevent reporting or inquiry into organizations beginning with "02."
In the Maintain Org Security Profiles screen, you can set up profiles as Inclusive, Exclusive, or Both. The Inclusive method is intended to make each organization listed accessible for this profile. Only "Full" rights can be assigned to the orgs when you use this method. The Exclusive method is intended to provide a list of organizations to which there will be no access. Only "No rights" can be assigned when using this method. The Both method allows profiles to be set up that can be assigned either "Full rights" or "No rights." With any of the above methods, you must use the relations "equal to" or "begins with." With the "begins with" relation method, you can establish access to all org levels beneath the one you enter on the screen. For example, if the "begins with" relations method is used and you enter an org of "1" on the table, you have access to any org that began with "1." If the "equal to" relation method is used with an org of 1.1, you would have access only to org 1.1.
In this screen you can set up a profile that has the Apply Org Security box unchecked and has no records in the table. Any "org security groups" that contain this profile will have no org security in effect.
Use this screen to assign org security profiles to modules. Then assign org security groups in the Maintain Users screen. Now you can have different Org Security Profiles in effect in different modules for different groups. For example, a general ledger accountant may need full access to all areas of Costpoint General Ledger, but should only have rights to his own home organization for Labor. In this case, assign an org security profile with access to all orgs to Costpoint General Ledger, and assign a profile containing only that employee's home org for Costpoint Labor. You can then assign this org security group to this employee in the Maintain Users screen.
In order for system-wide org security to work properly, you must enable or disable it by module. All modules purchased will be listed in the child table window in this screen. The Apply Org Security checkbox will default to unchecked and org security will not be in effect for the entire module. Once you select the checkbox, you can access the Enable/Disable Org Security for Functions subtask and apply org security to the screens within each module that have been programmed for org security (see listing at the end of this special topic). If there are several screens within a module for which org security should not be applied, the Apply Org Security checkbox on those lines should remain unchecked. This feature provides maximum flexibility in regard to org security.
This process creates an org security Lookup table. You should set it up only after all other screens that deal with org security have been set up. You must run the screen before org security will work properly. The creation of this table will speed up system processing when org security is in place. All applications affected by org security will have to access this table to enforce org security. You should rerun this process only when orgs are added or changed or new profiles are set up.
|
Module |
Screen |
|
AP |
Check History Inquiry |
|
AP |
Check Register |
|
AP |
Open A/P Report |
|
AP |
Print AP History Report |
|
AP |
Print Debit Memos |
|
AP |
Print Lien Waivers |
|
AP |
Print Voucher Edit |
|
AP |
Reverse Posted Vouchers |
|
AP |
Vendor History Inquiry |
|
AP |
Voucher History Inquiry |
|
AP |
Voucher Register |
|
AR |
Analyze Receivables and Collections |
|
AR |
Customer Receivable Inquiry |
|
AR |
Maintain A/R History |
|
AR |
Print Accounts Receivable Aging Report |
|
AR |
Print Accounts Receivable History Report |
|
AR |
Print Cash Receipts Edit Report |
|
AR |
Print Cash Receipts Register |
|
AR |
Print Lien Waivers |
|
AR |
Project Receivable Inquiry |
|
AR |
Restore Cash Receipts |
|
BD |
Apply Indirect Costs to Budgets |
|
BD |
Calculate Over Budget Transactions |
|
BD |
ETC Inquiry |
|
BD |
Maintain C/SSR Information |
|
BD |
Maintain Estimate-to-Complete Amounts |
|
BD |
Maintain Estimate-to-Complete GLC Hours |
|
BD |
Maintain Estimate-to-Complete PLC Hours |
|
BD |
GLC Budgets By Period |
|
BD |
GLC Total Budget |
|
BD |
Maintain Budget Report Tables |
|
BD |
Maintain Budget Revisions |
|
BD |
Maintain Project Budget Line Item Revisions |
|
BD |
Maintain Project Line Item Budgets |
|
BD |
PLC Budgets By Period |
|
BD |
PLC Total Budget |
|
BD |
Print C/SSR |
|
BD |
Print ETC Hours Report |
|
BD |
Print ETC Report |
|
BD |
Project Budgets By Period |
|
BD |
Project Total Budget |
|
BD |
Project Unit Budgets By Period |
|
BD |
Revise ETC |
|
BD |
Update Incurred Cost for ETC |
|
BD |
Update Project Total Budget |
|
BL |
Adjustments in Open Billing Detail |
|
BL |
Calculate Billings |
|
BL |
Calculate Progress Payment Billings |
|
BL |
Create Billing EDI Files |
|
BL |
Create Unbilled Analysis Report |
|
BL |
Edit Milestone/Percent Complete Bills |
|
BL |
Edit Progress Payment Billings |
|
BL |
Edit Project Product Bills |
|
BL |
Edit Standard Bills |
|
BL |
Edit Unbilled Reason Codes |
|
BL |
Load Labor Rates |
|
BL |
Maintain Billing History |
|
BL |
Maintain Closed Billing Detail |
|
BL |
Maintain Closed Progress Billing Detail |
|
BL |
Maintain Project Bill Summary |
|
BL |
Maintain Project EDI Information |
|
BL |
Post Milestone/Percent Complete Bills |
|
BL |
Post Project Product Bills |
|
BL |
Post Standard Bills |
|
BL |
Print Billing Register |
|
BL |
Print Milestone/Percent Complete Bills |
|
BL |
Print Progress Payment Bills |
|
BL |
Print Standard Bills |
|
BL |
Print Unbilled Analysis |
|
BL |
Print Units Usage History Report |
|
BL |
Project Billing Info |
|
BL |
Project Sales Tax Setup |
|
BL |
Purge Open Billing Detail |
|
BL |
Update Cash Basis Information |
|
BP |
Mass Add Project Budgets |
|
CR |
Compute Billing Value of Cost Incurred |
|
CR |
Compute Project Transfer |
|
CR |
Post Revenue |
|
CR |
Project Transfer Setup |
|
CR |
Purge Allocation Basis Journal History |
|
CR |
Purge Project and Billing Information |
|
CR |
Redistribute Revenue by Project |
|
CR |
Update Project Transfer History Tables |
|
EC |
Approve ECNs |
|
EC |
ECN Status Inquiry |
|
EC |
Implement ECN Changes |
|
EC |
Maintain Approved ECNs |
|
EC |
Maintain ECNs |
|
EC |
Print ECN Impact Report |
|
EC |
Print ECN Traveler |
|
EM |
Assign Beneficiaries to Benefit Plans |
|
EM |
Assign Dependents to Benefit Plans |
|
EM |
Authorized Labor Categories |
|
EM |
Auto Load Employee Deferred Compensation Info |
|
EM |
Basic Employee Info |
|
EM |
Company Issued Documents By Employee |
|
EM |
Company Property Issued To Employee |
|
EM |
Company Vehicles By Employee |
|
EM |
Deferred Comp Beneficiary Info |
|
EM |
Education, Skills & Training Data |
|
EM |
Employee Benefit Elections |
|
EM |
Employee Bond Table |
|
EM |
Employee COBRA Dependents |
|
EM |
Employee Contributions |
|
EM |
Employee Deductions |
|
EM |
Employee Deferred Compensation Info |
|
EM |
Employee Dependent Care FSA Elections |
|
EM |
Employee Dependents/Beneficiaries |
|
EM |
Employee Drug Test Results |
|
EM |
Employee Government Mandated Orders |
|
EM |
Employee Leave |
|
EM |
Employee Medical Care FSA Elections |
|
EM |
Employee Medical Data |
|
EM |
Employee Taxes |
|
EM |
Employee User-Defined Info |
|
EM |
Employee Qualifying Events |
|
EM |
Employee Related Parties |
|
EM |
I-9 Data |
|
EM |
Maintain Dependent Care History |
|
EM |
Maintain Employee Allowances |
|
EM |
Maintain Employee Exit Interview |
|
EM |
Maintain Employee Master |
|
EM |
Maintain Employee Review Info |
|
EM |
Maintain Leave Beginning Balances |
|
EM |
Maintain Medical Care History |
|
EM |
Print Completed Exit Interview Form |
|
EM |
Print Completed Review Form |
|
EM |
Print Coupon Book/Create Invoice |
|
EM |
Print Employee Basic Report |
|
EM |
Print Employee Salary Info and History Rpt |
|
EM |
Print Employees By Job Title |
|
EM |
Print Employee Medical Surveillance Data |
|
EM |
Print Notification Letters |
|
EM |
Print Remittance of Government Mandated Orders |
|
EM |
Print Review Form Template |
|
EM |
Print Review Statistics By Employee |
|
EM |
Request Dependent Care Reimbursement |
|
EM |
Request Medical Care Reimbursement |
|
EM |
Salary Info and History |
|
EM |
Security Status By Employee |
|
EM |
State Drive License By Employee |
|
EM |
Track COBRA Elections |
|
EM |
Update Employees for Manager Change |
|
GL |
Account Activity Inquiry |
|
GL |
Create Preliminary Cash Flows Statement |
|
GL |
Currency Balance and Adjustments |
|
GL |
Edit Preliminary Cash Flows Statement |
|
GL |
G/L Inquiry |
|
GL |
G/L Inquiry-Budget and Prior Year Comparison |
|
GL |
Labor History to General Ledger Comparison |
|
GL |
Maintain Account/Org Links |
|
GL |
Maintain Non-Project Beginning Balances |
|
GL |
Maintain Org Elements |
|
GL |
Maintain Org/Account Budgets |
|
GL |
Maintain Organization User-Defined Info |
|
GL |
Maintain Prior Year Non-Project Comparative Balances |
|
GL |
Maintain Prior Year Project Comparative Balances |
|
GL |
Maintain Ref/Account/Org Links |
|
GL |
Mass Link Account/Orgs |
|
GL |
Mass Link Ref/Account/Orgs |
|
GL |
Print Account/Org Listing |
|
GL |
Print Bank Statement Report |
|
GL |
Print Financial Statement Detail |
|
GL |
Print Financial Statements |
|
GL |
Print G/L Budgets |
|
GL |
Print General Ledger Detail |
|
GL |
Print General Ledger Posting Summary |
|
GL |
Print Intercompany Receivable Edit Report |
|
GL |
Print JE Edit Reports |
|
GL |
Print JE Posting Summaries |
|
GL |
Print Organizational Listing |
|
GL |
Print Project Ledger Detail |
|
GL |
Print Project Trial Balance |
|
GL |
Print Trial Balance |
|
GL |
Reverse Posted JE |
|
HA |
Print Employee Roster |
|
HA |
Print New Hire Report |
|
HA |
Print Promotion Report |
|
HA |
Print Termination Report |
|
HA |
Print Training Report |
|
HA |
Print Transfer Report |
|
HB |
Print Census Report |
|
HB |
Print Employee FSA Report |
|
HB |
Print Life Insurance Beneficiaries Report |
|
HB |
Print Medical Dependents Report |
|
HC |
Notification Inquiry |
|
HC |
Print COBRA Elections Report |
|
HC |
Print Employee Dependents Report |
|
HC |
Print Payments Report |
|
HK |
Print Annual Additions (415) Rpt |
|
HK |
Print New Eligible Employees |
|
HK |
Print Vesting Percents by Employee |
|
HP |
Accident Info |
|
HP |
Approve Position Requisitions |
|
HP |
Manager/HR Reps by Org |
|
HP |
Position Requisition Request |
|
HP |
Print Accident Case History Report |
|
HP |
Print OSHA 200 Report |
|
HP |
Print Wage History Report |
|
HP |
Print Worker's Comp Incident Report |
|
HP |
Requisition Approvers |
|
HS |
Compensation Budget By Organization |
|
HS |
Detail Position Descriptions |
|
HS |
Print Budgeted Vs. Actual Compensation Report |
|
HS |
Print Compa-ratio |
|
HS |
Print Employees By Plan By Grade |
|
HS |
Print Increase Pool Report |
|
HS |
Print Performance Review Schedule |
|
HS |
Print Position Descriptions |
|
HS |
Print Review Statistics By Manager |
|
HS |
Print/Send Performance Review Schedule |
|
IW |
Create IWO Allocations |
|
IW |
Export IWO Allocations |
|
IW |
IWO Project Setup |
|
IW |
Maintain IWO Allowances |
|
IW |
Maintain IWO Suspense |
|
LD |
Conversion of Crew Timesheets |
|
LD |
Employee Labor Inquiry |
|
LD |
Employee Project TS Defaults |
|
LD |
Employee Project-Acct-Grp TS Defaults |
|
LD |
Employee Timesheet Line Type Defaults |
|
LD |
Enter Correcting Timesheets |
|
LD |
Enter Crew Timesheets |
|
LD |
Enter Timesheets |
|
LD |
Mass Update of Fringes |
|
LD |
Print Employee Basic Report |
|
LD |
Print Employee Labor Summary Rpt |
|
LD |
Print Employee Salary Info and History Rpt |
|
LD |
Print Labor Utilization Report |
|
LD |
Print Missing Timesheet Rpt |
|
LD |
Print TS Edit By Acct Rpt |
|
LD |
Print TS Edit By Crew Rpt |
|
LD |
Print TS Edit By Empl Rpt |
|
LD |
Print Tiered Fringe Analysis Report |
|
LD |
Print Timesheet History Rpt |
|
LD |
Purge Crew Timesheets |
|
LD |
Salary Info and History |
|
LD |
Timesheet History Inquiry |
|
LV |
Leave Code Reassignment |
|
LV |
Leave History Inquiry |
|
LV |
Maintain Leave Edit Table |
|
LV |
Print Accrued Leave Report |
|
LV |
Print Employee Leave Report |
|
LV |
Print Leave Edit Report |
|
PC |
Create MO Subcontractor Requisitions |
|
PC |
Enter MO Operation Completions |
|
PC |
Enter MO QC Inspection Results |
|
PC |
Enter Manufacturing Orders |
|
PC |
Expedite Manufacturing Orders |
|
PC |
Manufacturing Order Status Inquiry |
|
PC |
Modify MO Costs |
|
PC |
Modify MO Labor Costs |
|
PC |
Print Component Shortage Report |
|
PC |
Print MO Cost Report |
|
PC |
Print Manufacturing Order Documentation |
|
PC |
Process Material Requirements |
|
PC |
Relieve Manufacturing Orders |
|
PI |
Print Organization Cost Summary |
|
PI |
Print Project Labor Summary |
|
PI |
Print Project Master Reports |
|
PI |
Print Project Non-Labor Detail |
|
PI |
Print Project Setup Report |
|
PI |
Print Project Status Report |
|
PI |
Print Project Work Force |
|
PI |
Print Revenue Summaries |
|
PI |
Print Revenue Worksheet |
|
PI |
Print T&M Analysis |
|
PI |
Project Inquiry |
|
PI |
Project Inquiry by Level |
|
PI |
Project Ledger Inquiry |
|
PJ |
Alternate Reporting |
|
PJ |
Assign PLC to Employee Work Force |
|
PJ |
Assign PLC to Projects |
|
PJ |
Assign PLC to Vendor Work Force |
|
PJ |
Assign Standard Text |
|
PJ |
Basic Info |
|
PJ |
Basic Revenue Info |
|
PJ |
CLIN Information |
|
PJ |
Cost of Goods Sold |
|
PJ |
Define Rate Sequence |
|
PJ |
Deliverables |
|
PJ |
Enter Change Orders |
|
PJ |
Government Contract Info |
|
PJ |
Link GLC to Project PLC |
|
PJ |
Maintain Burden Fee Overrides |
|
PJ |
Maintain Cost Fee Overrides |
|
PJ |
Maintain Labor Summary |
|
PJ |
Maintain Multiplier Overrides |
|
PJ |
Maintain Project Master |
|
PJ |
Maintain Revenue Formulas |
|
PJ |
Maintain Valid Project/Account/Orgs |
|
PJ |
Mass Link Projects/Accounts/Organizations |
|
PJ |
Modifications |
|
PJ |
Prior Year Billable Value Amounts |
|
PJ |
Prior Year Cost and Revenue |
|
PJ |
Prior Year Labor Summary |
|
PJ |
Prior Year T&M Revenue |
|
PJ |
Prior Year Unit Revenue |
|
PJ |
Project Billing Info |
|
PJ |
Project Burden Cost Ceilings |
|
PJ |
Project Direct Cost Ceilings |
|
PJ |
Project Employee Hours Ceilings |
|
PJ |
Project Employee Work Force |
|
PJ |
Project Hours Ceilings |
|
PJ |
Project PLC Rates |
|
PJ |
Project PLC By Employee/Vendor |
|
PJ |
Project Total Ceilings |
|
PJ |
Project Unit Pricing |
|
PJ |
Project Vendor Hours Ceilings |
|
PJ |
Project Vendor Work Force |
|
PJ |
Project Work Force Billing Rates |
|
PJ |
User-Defined Info |
|
PP |
Approve Purchase Requisition Lines |
|
PP |
Approve Purchase Requisitions |
|
PP |
Assign Requisition Lines to Buyers |
|
PP |
Assign Requisitions to Buyers |
|
PP |
Create Purchase Orders |
|
PP |
Enter Requisitions |
|
PP |
Requisition Processing |
|
PP |
Requisition Processing by Line |
|
PR |
A/P Voucher Status Report |
|
PR |
Basic Employee Info Inquiry |
|
PR |
Create A/P Vouchers |
|
PR |
Edit W2s |
|
PR |
Employee Earnings Inquiry |
|
PR |
Employee Taxes Inquiry |
|
PR |
Maintain Employee Bank Info |
|
PR |
Maintain Employee Earnings |
|
PR |
Maintain Employee Master |
|
PR |
Maintain Payroll Edit Table |
|
PR |
Mass Update Employee Package Deductions |
|
PR |
Payroll Contributions Inquiry |
|
PR |
Payroll Deductions Inquiry |
|
PR |
Payroll Edit Table Inquiry |
|
PR |
Print Certified Payroll Rpt |
|
PR |
Print Deduction Summary Rpt |
|
PR |
Print Deduction/Benefit Rpt By Local |
|
PR |
Print Employee Bank Info Rpt |
|
PR |
Print Employee Earnings Rpt |
|
PR |
Print Payroll Edit Report |
|
PR |
Print Weekly Fringe Stamp Report |
|
PR |
Void/Replace Posted Paychecks |
|
PR |
Salary Info and History |
|
PR |
Salary Info and History Inquiry |
|
TR |
Schedule Trips |
|
Code |
Module |
|
AP |
Accounts Payable |
|
AR |
Accounts Receivable |
|
BD |
Projects/Budgeting & ETC |
|
BL |
Billing |
|
BP |
Advanced Project Budgeting |
|
CR |
Projects/Cost & Revenue Processing |
|
EC |
Engineering Change Notices |
|
EM |
Human Resources/Employee |
|
GL |
General Ledger |
|
HA |
Human Resources/Affirmative Action |
|
HB |
Human Resources/ Benefits |
|
HC |
Human Resources/COBRA Administration |
|
HK |
Human Resources/Deferred Compensation Administration |
|
HP |
Human Resources/Personnel |
|
HS |
Human Resources/Compensation |
|
IW |
Projects/Inter-Company Work Orders |
|
LD |
Labor |
|
LV |
Leave |
|
PC |
Materials/Production Control |
|
PI |
Projects/Inquiry & Reporting |
|
PJ |
Projects/Project Setup |
|
PR |
Payroll |
|
TR |
Travel |