Organizational security provides a means for users to enforce security at the organizational level. The primary purpose of organizational security is to prevent unauthorized reporting or inquiry on organizations, not to prevent transaction entry. This feature is enabled on a system-wide basis and is entirely optional. If the existing screen rights security is more restrictive, then the existing screen rights security supersedes organizational security. "Organizational profiles" are created which either grant or deny access to the organizations listed. These profiles are then assigned to org security groups by module. At this level, disabling org security by application within modules can further refine the security. Each individual user is then assigned to an Org Security Group in the Maintain Users screen. After all setup is completed, the Update Org Security Profiles process can be run; this will create an Org Security Lookup table. This table will reduce processing time when organizational security is in effect.
"Project security" and "employee security" are implied by organizational security. For example, if you have rights to the owning org of a project, you will have rights to all the information relating to that project, as long as you also have access to all the screens necessary to obtain that information. Similarly, if you have rights to an employee's home organization, then you will also have rights to all information about that employee, as long as you have access to the necessary information screens. Keep in mind that labor suppression can be set individually by user.
In the System Settings screen you can invoke organizational security. This is a system-wide setting, and will therefore apply to all users. However, an organizational profile and an org security group can be established that effectively override organizational security. This will in effect remove org security for users assigned to that org security group. If org security is being implemented after the Costpoint System is already "live," then you may wish to check the Org Security box in this screen after Org Profiles and org security groups have already been established and assigned. To check this box beforehand would interrupt processing.
"Org Security Profiles" are groups of organizations to which you are granted or denied access. This feature is particularly useful for entities that run multiple companies in one database.
For example, if organizations beginning with "01" represent the Washington division and organizations beginning with "02" represent the California division, a profile might be set up of "01" using a "begins with" relation method. This profile would allow access to any organizations beginning with "01." It would also prevent reporting or inquiry into organizations beginning with "02."
Profiles are set up as Inclusive, Exclusive, or Both. The Inclusive method is intended to make each organization listed accessible for this profile. Only "Full" rights can be assigned to the orgs when using this method. The Exclusive method is intended to provide a list of organizations to which there will be no access. Only "No rights" can be assigned when using this method. The Both method allows profiles to be set up that can be assigned either "Full rights" or "No rights." With any of the above methods, the relations "equal to" or "begins with" must be used. The "begins with" relation method will allow you to establish access to all org levels beneath the one you enter on the screen. For example, if the "begins with" relations method is used and an org of "1" is entered on the table, you would have access to any org that began with "1." If the "equal to" relation method is used with an org of 1.1, you would only have access to org 1.1.
In this screen you can set up a profile that has the Apply Org Security box unchecked and has no records in the table. Any "org security groups" that contain this profile will have no org security in effect.
Use this screen to assign Org Security Profiles to modules. These Org Security Groups are then assigned in the Maintain Users screen. This will allow different Org Security Profiles to be if effect in different modules for different groups. For example, a general ledger accountant may need full access to all areas of Costpoint General Ledger, but should only have rights to his or her own home organization for Labor. In this case, an Org Security Profile with access to all orgs would be assigned to Costpoint General Ledger, while a profile containing only that employee's home org would be assigned for Costpoint Labor. This Org Security Group could then be assigned to this employee in the Maintain Users screen.
In order for system-wide org security to work properly, it must be enabled or disabled by module. All modules purchased will be listed in the child table window in this screen. The Apply Org Security checkbox will default to unchecked and org security will not be in effect for the entire module. Once the box is checked, you can access the Enable/Disable Org Security for Functions subtask and apply org security to the screens within each module that have been programmed for org security (see listing at the end of this special topic). If there are several screens within a module for which org security should not be applied, then the Apply Org Security checkbox on those lines should remain unchecked. This feature provides maximum flexibility in regard to org security.
This process creates an org security Lookup table. It should only be set up after all other screens which deal with org security have been set up. It must be run before org security will work properly. The creation of this table will speed up system processing when org security is in place. All applications affected by org security will have to access this table to enforce org security. This process should only be rerun when orgs are added or changed or new profiles are set up.
Module |
Screen |
AP |
Check History Inquiry |
AP |
Check Register |
AP |
Open A/P Report |
AP |
Print AP History Report |
AP |
Print Debit Memos |
AP |
Print Lien Waiver Report |
AP |
Print Lien Waivers |
AP |
Print Voucher Edit |
AP |
Reverse Posted Vouchers |
AP |
Vendor History Inquiry |
AP |
Voucher History Inquiry |
AP |
Voucher Register |
AR |
Analyze Receivables and Collections |
AR |
Customer Receivable Inquiry |
AR |
Maintain A/R History |
AR |
Print Accounts Receivable Aging Report |
AR |
Print Accounts Receivable History Report |
AR |
Print Cash Receipts Edit Report |
AR |
Print Cash Receipts Register |
AR |
Print Lien Waivers Report |
AR |
Print Lien Waivers |
AR |
Project Receivable Inquiry |
AR |
Restore Cash Receipts |
BD |
Apply Indirect Costs to Budgets |
BD |
Calculate Over Budget Transactions |
BD |
Enter Change Orders |
BD |
ETC Inquiry |
BD |
Maintain C/SSR Information |
BD |
Maintain Estimate-to-Complete Amounts |
BD |
Maintain Estimate-to-Complete GLC Hours |
BD |
Maintain Estimate-to-Complete PLC Hours |
BD |
GLC Budgets By Period |
BD |
GLC Total Budget |
BD |
Maintain Budget Report Tables |
BD |
Maintain Budget Revisions |
BD |
Maintain Project Budget Line Item Revisions |
BD |
Maintain Project Line Item Budgets |
BD |
PLC Budgets By Period |
BD |
PLC Total Budget |
BD |
Print ETC Hours Report |
BD |
Print ETC Report |
BD |
Project Budgets By Period |
BD |
Project Total Budget |
BD |
Project Unit Budgets By Period |
BD |
Revise ETC |
BD |
Update Incurred Cost for ETC |
BD |
Update Project Total Budget |
BL |
Adjustments in Open Billing Detail |
BL |
Calculate Billings |
BL |
Calculate Progress Payment Billings |
BL |
Create Billing EDI Files |
BL |
Create Unbilled Analysis Report |
BL |
Edit Milestone/Percent Complete Bills |
BL |
Edit Progress Payment Billings |
BL |
Edit Project Product Bills |
BL |
Edit Standard Bills |
BL |
Edit Unbilled Reason Codes |
BL |
Load Billing Rates for Revenue and Billing |
BL |
Maintain Billing History |
BL |
Maintain Closed Billing Detail |
BL |
Maintain Closed Progress Billing Detail |
BL |
Maintain Project Bill Summary |
BL |
Maintain Project EDI Summary |
BL |
Post Milestone/Percent Complete Bills |
BL |
Post Project Product Bills |
BL |
Post Standard Bills |
BL |
Print Billing Register |
BL |
Print Milestone/Percent Complete Bills |
BL |
Print Progress Payment Bills |
BL |
Print Standard Bills |
BL |
Print Unbilled Receivable Analysis |
BL |
Print Unbilled Reason Code Report |
BL |
Print Units Usage History Report |
BL |
Project Billing Info |
BL |
Project Sales Tax Setup |
BL |
Purge Open Billing Detail |
BL |
Update Cash Basis Information |
BP |
Mass Add Project Budgets |
CR |
Compute Billing Value Cost Incurred |
CR |
Compute Project Transfer |
CR |
Post Revenue |
CR |
Project Transfer Setup |
CR |
Purge Allocation Basis Journal History |
CR |
Purge Project and Billing Information |
CR |
Redistribute Revenue by Project |
CR |
Update Project Transfer History |
EC |
Approve ECNs |
EC |
ECN Status Inquiry |
EC |
Implement ECN Changes |
EC |
Maintain Approved ECNs |
EC |
Maintain ECNs |
EC |
Print ECN Impact Report |
EC |
Print ECN Traveler |
EM |
Assign Beneficiaries to Benefit Plans |
EM |
Assign Dependents to Benefit Plans |
EM |
Authorized Labor Categories |
EM |
Auto Load Employee Deferred Compensation Info |
EM |
Basic Employee Info |
EM |
Company Issued Documents By Employee |
EM |
Company Property Issued To Employee |
EM |
Company Vehicles By Employee |
EM |
Deferred Comp Beneficiary Info |
EM |
Detail Position Descriptions |
EM |
Education, Skills & Training Data |
EM |
Employee Benefit Elections |
EM |
Employee Bond Table |
EM |
Employee COBRA Dependents |
EM |
Employee Contributions |
EM |
Employee Deductions |
EM |
Employee Deferred Compensation Info |
EM |
Employee Dependent Care FSA Elections |
EM |
Employee Dependents/Beneficiaries |
EM |
Employee Drug Testing Results |
EM |
Employee Government Mandated Orders |
EM |
Employee Leave |
EM |
Employee Medical Care FSA Elections |
EM |
Employee Medical Surveillance |
EM |
Employee Qualifying Events |
EM |
Employee Related Parties |
EM |
Employee Taxes |
EM |
Maintain Dependent Care History |
EM |
Maintain Employee Allowances |
EM |
Maintain Employee Exit Interview Info |
EM |
Maintain Employee FSA Elections |
EM |
Maintain Employee Master |
EM |
Maintain Employee Review Info |
EM |
Maintain Leave Beginning Balances |
EM |
Maintain Medical Care History |
EM |
Managers/HR Reps by Org |
EM |
Mass Update Employee Package Deductions |
EM |
Print Completed Exit Interview Form |
EM |
Print Completed Review Form |
EM |
Print Coupon Book/Create Invoice |
EM |
Print Employee Basic Report |
EM |
Print Employee Medical Surveillance Data |
EM |
Print Employee Salary Info and History Rpt |
EM |
Print Employees By Job Title |
EM |
Print Notification Letters |
EM |
Print Position Descriptions |
EM |
Print Remittance of Government Mandated Orders |
EM |
Print Review Form Template |
EM |
Print Review Statistics By Employee |
EM |
Request Dependent Care Reimbursement |
EM |
Request Medical Care Reimbursement |
EM |
Salary Info and History |
EM |
Security Status By Employee |
EM |
State Driver License By Employee |
EM |
Track COBRA Elections |
EM |
Update Employees for Manager Change |
GL |
Account Activity Inquiry |
GL |
Create Preliminary Cash Flow Statement |
GL |
Currency Balance and Adjustments |
GL |
Edit Preliminary Cash Flow Statements |
GL |
G/L Inquiry |
GL |
G/L Inquiry-Budget and Prior Year Comparison |
GL |
Labor History to General Ledger Comparison |
GL |
Maintain Account/Org Links |
GL |
Maintain Non-Project Beginning Balances |
GL |
Maintain Org Elements |
GL |
Maintain Org/Account Budgets |
GL |
Maintain Organization User-Defined Info |
GL |
Maintain Prior Year Non-Project Beginning Balances |
GL |
Maintain Prior Year Project Beginning Balances |
GL |
Maintain Ref/Account/Org Links |
GL |
Mass Link Account/Orgs |
GL |
Mass Link Ref/Account/Orgs |
GL |
Print Account/Org Listing |
GL |
Print Bank Statement Report |
GL |
Print Financial Statement Detail |
GL |
Print Financial Statements |
GL |
Print G/L Budgets |
GL |
Print General Ledger Detail |
GL |
Print General Ledger Posting Summary |
GL |
Print Intercompany Receivable Edit Report |
GL |
Print JE Edit Reports |
GL |
Print JE Posting Summaries |
GL |
Print Organizational Listing |
GL |
Print Project Ledger Detail |
GL |
Print Project Trial Balance |
GL |
Print Trial Balance |
GL |
Reverse Posted JE |
HA |
Print Employee Roster |
HA |
Print New Hire Report |
HA |
Print Promotion Report |
HA |
Print Termination Report |
HA |
Print Training Report |
HA |
Print Transfer Report |
HB |
Print Census Report |
HB |
Print Employee FSA Report |
HB |
Print Life Insurance Beneficiaries Report |
HB |
Print Medical Dependents Report |
HC |
Notification Inquiry |
HC |
Print COBRA Elections Report |
HC |
Print Employee Dependents Report |
HC |
Print Payments Report |
HK |
Print Annual Additions (415) Rpt |
HK |
Print New Eligible Employees |
HK |
Print Vesting Percents by Employee |
HP |
Accident Info |
HP |
Approve Position Requisitions |
HP |
Certification |
HP |
I-9 Data |
HP |
Position Requisition Request |
HP |
Print Accident Case History Report |
HP |
Print OSHA 200 Report |
HP |
Print Wage History Report |
HP |
Print Worker's Comp Incident Report |
HP |
Requisition Approvers |
HS |
Compensation Budget By Organization |
HS |
Print Budgeted Vs. Actual Compensation Report |
HS |
Print Compa-ratio |
HS |
Print Employees By Plan By Grade |
HS |
Print Increase Pool Report |
HS |
Print Performance Review Schedule |
HS |
Print Review Statistics By Manager |
HS |
Print/Send Performance Review Schedule |
IW |
Create IWO Allocations |
IW |
Export IWO Allocations |
IW |
IWO Project Setup |
IW |
Maintain IWO Allowances |
IW |
Maintain IWO Transfer History |
LD |
Conversion of Crew Timesheets |
LD |
Employee Labor Inquiry |
LD |
Employee Project TS Defaults |
LD |
Employee Project-Acct-Grp TS Defaults |
LD |
Employee Timesheet Line Type Defaults |
LD |
Enter Correcting Timesheets |
LD |
Enter Crew Timesheets |
LD |
Enter Timesheets |
LD |
Mass Update of Fringes |
LD |
Print Employee Labor Summary Rpt |
LD |
Print Labor Utilization Report |
LD |
Print Missing Timesheet Rpt |
LD |
Print TS Edit By Acct Rpt |
LD |
Print TS Edit By Crew Rpt |
LD |
Print TS Edit By Empl Rpt |
LD |
Print Tiered Fringe Analysis Report |
LD |
Print Timesheet History Rpt |
LD |
Purge Crew Timesheets |
LD |
Timesheet History Inquiry |
LV |
Leave Code Reassignment |
LV |
Leave History Inquiry |
LV |
Maintain Leave Edit Table |
LV |
Print Accrued Leave Report |
LV |
Print Employee Leave Report |
LV |
Print Leave Edit Report |
PC |
Create MO Subcontractor Requisitions |
PC |
Enter MO Operation Completions |
PC |
Enter MO QC Inspection Results |
PC |
Enter Manufacturing Orders |
PC |
Expedite Manufacturing Orders |
PC |
Manufacturing Order Status Inquiry |
PC |
Modify MO Costs |
PC |
Modify MO Labor Costs |
PC |
Print Component Shortage Report |
PC |
Print MO Cost Report |
PC |
Print Manufacturing Order Documentation |
PC |
Process Material Requirements |
PC |
Relieve Manufacturing Orders |
PI |
Print C/SSR Report |
PI |
Print Organization Cost Summary |
PI |
Print Project Labor Summary |
PI |
Print Project Master Reports |
PI |
Print Project Non-Labor Detail |
PI |
Print Project Setup Report |
PI |
Print Project Status Report |
PI |
Print Project Work Force |
PI |
Print Revenue Summaries |
PI |
Print Revenue Worksheet |
PI |
Print T&M Analysis |
PI |
Project Inquiry |
PI |
Project Inquiry by Level |
PI |
Project Ledger Inquiry |
PJ |
Alternate Reporting |
PJ |
Assign PLC to Employee Work Force |
PJ |
Assign PLC to Projects |
PJ |
Assign PLC to Vendor Work Force |
PJ |
Assign Standard Text |
PJ |
Basic Info |
PJ |
Basic Revenue Info |
PJ |
CLIN Information |
PJ |
Cost of Goods Sold |
PJ |
Define Rate Sequence |
PJ |
Deliverables |
PJ |
Enter Change Orders |
PJ |
Government Contract Info |
PJ |
Link GLC to Project PLC |
PJ |
Maintain Burden Fee Overrides |
PJ |
Maintain Cost Fee Overrides |
PJ |
Maintain Labor Summary |
PJ |
Maintain Multiplier Overrides |
PJ |
Maintain Project Master |
PJ |
Maintain Revenue Formulas |
PJ |
Maintain Valid Project/Account/Orgs |
PJ |
Mass Link Projects/Accounts/Organizations |
PJ |
Modifications |
PJ |
Prior Year Billable Value Amounts |
PJ |
Prior Year Cost and Revenue |
PJ |
Prior Year Labor Summary |
PJ |
Prior Year T&M Revenue |
PJ |
Prior Year Unit Revenue |
PJ |
Project Billing Info |
PJ |
Project Burden Cost Ceilings |
PJ |
Project Direct Cost Ceilings |
PJ |
Project Employee Hours Ceilings |
PJ |
Project Employee Work Force |
PJ |
Project Hours Ceilings |
PJ |
Project PLC Rates |
PJ |
Project PLC By Employee/Vendor |
PJ |
Project Total Ceilings |
PJ |
Project Unit Pricing |
PJ |
Project Vendor Hours Ceilings |
PJ |
Project Vendor Work Force |
PJ |
Project Work Force Billing Rates |
PJ |
User-Defined Info |
PP |
Approve Purchase Requisition Lines |
PP |
Approve Purchase Requisitions |
PP |
Assign Requisition Lines to Buyers |
PP |
Assign Requisitions to Buyers |
PP |
Create Purchase Orders |
PP |
Enter Requisitions |
PP |
Requisition Processing |
PP |
Requisition Processing by Line |
PR |
A/P Payroll Liability History |
PR |
A/P Voucher Status Report |
PR |
Basic Employee Info Inquiry |
PR |
Create A/P Vouchers for Payroll Liabilities |
PR |
Edit W2s |
PR |
Employee Earnings Inquiry |
PR |
Employee Project TS Defaults |
PR |
Employee Project-Acct-Grp TS Defaults |
PR |
Employee User-Defined Info |
PR |
Maintain Employee Bank Info |
PR |
Maintain Employee Earnings |
PR |
Maintain Payroll Edit Table |
PR |
Payroll Contributions Inquiry |
PR |
Payroll Deductions Inquiry |
PR |
Payroll Edit Table Inquiry |
PR |
Payroll Taxes Inquiry |
PR |
Print Certified Payroll Rpt |
PR |
Print Deduction Summary Rpt |
PR |
Print Deduction/Benefit Rpt By Local |
PR |
Print Employee Bank Info Rpt |
PR |
Print Employee Earnings Rpt |
PR |
Print Payroll Edit Report |
PR |
Print History of Arrears Deduction Report |
PR |
Print Weekly Fringe Stamp Report |
PR |
Void/Replace Posted Paychecks |
PR |
Salary Info and History Inquiry |
TR |
Schedule Trips |
Code |
Module |
AP |
Accounts Payable |
BD |
Budgeting & ETC |
BL |
Billing |
CR |
Cost & Revenue Processing |
EC |
Engineering Change Notices |
EM |
Employee |
GL |
General Ledger |
HA |
Affirmative Action |
HB |
Benefits |
HC |
COBRA |
HK |
Deferred Compensation Administration |
HP |
Personnel Administration |
HS |
Human Resources/Compensation Administration |
IW |
Inter-Company Work Orders |
LD |
Labor |
LV |
Leave |
PC |
Production Control |
PI |
Projects/Inquiry & Reporting |
PJ |
Projects/Project Setup |
PR |
Payroll |
TR |
Travel |