ORGANIZATIONAL SECURITY - Special Topic SA-5

Organizational security provides a means for users to enforce security at the organizational level. The primary purpose of organizational security is to prevent unauthorized reporting or inquiry on organizations, not to prevent transaction entry. This feature is enabled on a system-wide basis and is entirely optional. If the existing screen rights security is more restrictive, then the existing screen rights security supersedes organizational security. "Organizational profiles" are created which either grant or deny access to the organizations listed. These profiles are then assigned to org security groups by module. At this level, disabling org security by application within modules can further refine the security. Each individual user is then assigned to an Org Security Group in the Maintain Users screen. After all setup is completed, the Update Org Security Profiles process can be run; this will create an Org Security Lookup table. This table will reduce processing time when organizational security is in effect.

"Project security" and "employee security" are implied by organizational security. For example, if you have rights to the owning org of a project, you will have rights to all the information relating to that project, as long as you also have access to all the screens necessary to obtain that information. Similarly, if you have rights to an employee's home organization, then you will also have rights to all information about that employee, as long as you have access to the necessary information screens. Keep in mind that labor suppression can be set individually by user.

Implementation

System Settings

In the System Settings screen you can invoke organizational security. This is a system-wide setting, and will therefore apply to all users. However, an organizational profile and an org security group can be established that effectively override organizational security. This will in effect remove org security for users assigned to that org security group. If org security is being implemented after the Costpoint System is already "live," then you may wish to check the Org Security box in this screen after Org Profiles and org security groups have already been established and assigned. To check this box beforehand would interrupt processing.

Maintain Org Security Profiles

"Org Security Profiles" are groups of organizations to which you are granted or denied access. This feature is particularly useful for entities that run multiple companies in one database.

For example, if organizations beginning with "01" represent the Washington division and organizations beginning with "02" represent the California division, a profile might be set up of "01" using a "begins with" relation method. This profile would allow access to any organizations beginning with "01." It would also prevent reporting or inquiry into organizations beginning with "02."

Profiles are set up as Inclusive, Exclusive, or Both. The Inclusive method is intended to make each organization listed accessible for this profile. Only "Full" rights can be assigned to the orgs when using this method. The Exclusive method is intended to provide a list of organizations to which there will be no access. Only "No rights" can be assigned when using this method. The Both method allows profiles to be set up that can be assigned either "Full rights" or "No rights." With any of the above methods, the relations "equal to" or "begins with" must be used. The "begins with" relation method will allow you to establish access to all org levels beneath the one you enter on the screen. For example, if the "begins with" relations method is used and an org of "1" is entered on the table, you would have access to any org that began with "1." If the "equal to" relation method is used with an org of 1.1, you would only have access to org 1.1.

In this screen you can set up a profile that has the Apply Org Security box unchecked and has no records in the table. Any "org security groups" that contain this profile will have no org security in effect.

Maintain Org Security Groups

Use this screen to assign Org Security Profiles to modules. These Org Security Groups are then assigned in the Maintain Users screen. This will allow different Org Security Profiles to be if effect in different modules for different groups. For example, a general ledger accountant may need full access to all areas of Costpoint General Ledger, but should only have rights to his or her own home organization for Labor. In this case, an Org Security Profile with access to all orgs would be assigned to Costpoint General Ledger, while a profile containing only that employee's home org would be assigned for Costpoint Labor. This Org Security Group could then be assigned to this employee in the Maintain Users screen.

Enable/Disable Org Security Modules

In order for system-wide org security to work properly, it must be enabled or disabled by module. All modules purchased will be listed in the child table window in this screen. The Apply Org Security checkbox will default to unchecked and org security will not be in effect for the entire module. Once the box is checked, you can access the Enable/Disable Org Security for Functions subtask and apply org security to the screens within each module that have been programmed for org security (see listing at the end of this special topic). If there are several screens within a module for which org security should not be applied, then the Apply Org Security checkbox on those lines should remain unchecked. This feature provides maximum flexibility in regard to org security.

Update Org Security Profiles

This process creates an org security Lookup table. It should only be set up after all other screens which deal with org security have been set up. It must be run before org security will work properly. The creation of this table will speed up system processing when org security is in place. All applications affected by org security will have to access this table to enforce org security. This process should only be rerun when orgs are added or changed or new profiles are set up.

Applications Containing Organizational Security

Note: A list of module codes and their names appears at the end of this special topic.

Module

Screen

AP

Check History Inquiry

AP

Check Register

AP

Open A/P Report

AP

Print AP History Report

AP

Print Debit Memos

AP

Print Lien Waiver Report

AP

Print Lien Waivers

AP

Print Voucher Edit

AP

Reverse Posted Vouchers

AP

Vendor History Inquiry

AP

Voucher History Inquiry

AP

Voucher Register

AR

Analyze Receivables and Collections

AR

Customer Receivable Inquiry

AR

Maintain A/R History

AR

Print Accounts Receivable Aging Report

AR

Print Accounts Receivable History Report

AR

Print Cash Receipts Edit Report

AR

Print Cash Receipts Register

AR

Print Lien Waivers Report

AR

Print Lien Waivers

AR

Project Receivable Inquiry

AR

Restore Cash Receipts

BD

Apply Indirect Costs to Budgets

BD

Calculate Over Budget Transactions

BD

Enter Change Orders

BD

ETC Inquiry

BD

Maintain C/SSR Information

BD

Maintain Estimate-to-Complete Amounts

BD

Maintain Estimate-to-Complete GLC Hours

BD

Maintain Estimate-to-Complete PLC Hours

BD

GLC Budgets By Period

BD

GLC Total Budget

BD

Maintain Budget Report Tables

BD

Maintain Budget Revisions

BD

Maintain Project Budget Line Item Revisions

BD

Maintain Project Line Item Budgets

BD

PLC Budgets By Period

BD

PLC Total Budget

BD

Print ETC Hours Report

BD

Print ETC Report

BD

Project Budgets By Period

BD

Project Total Budget

BD

Project Unit Budgets By Period

BD

Revise ETC

BD

Update Incurred Cost for ETC

BD

Update Project Total Budget

BL

Adjustments in Open Billing Detail

BL

Calculate Billings

BL

Calculate Progress Payment Billings

BL

Create Billing EDI Files

BL

Create Unbilled Analysis Report

BL

Edit Milestone/Percent Complete Bills

BL

Edit Progress Payment Billings

BL

Edit Project Product Bills

BL

Edit Standard Bills

BL

Edit Unbilled Reason Codes

BL

Load Billing Rates for Revenue and Billing

BL

Maintain Billing History

BL

Maintain Closed Billing Detail

BL

Maintain Closed Progress Billing Detail

BL

Maintain Project Bill Summary

BL

Maintain Project EDI Summary

BL

Post Milestone/Percent Complete Bills

BL

Post Project Product Bills

BL

Post Standard Bills

BL

Print Billing Register

BL

Print Milestone/Percent Complete Bills

BL

Print Progress Payment Bills

BL

Print Standard Bills

BL

Print Unbilled Receivable Analysis

BL

Print Unbilled Reason Code Report

BL

Print Units Usage History Report

BL

Project Billing Info

BL

Project Sales Tax Setup

BL

Purge Open Billing Detail

BL

Update Cash Basis Information

BP

Mass Add Project Budgets

CR

Compute Billing Value Cost Incurred

CR

Compute Project Transfer

CR

Post Revenue

CR

Project Transfer Setup

CR

Purge Allocation Basis Journal History

CR

Purge Project and Billing Information

CR

Redistribute Revenue by Project

CR

Update Project Transfer History

EC

Approve ECNs

EC

ECN Status Inquiry

EC

Implement ECN Changes

EC

Maintain Approved ECNs

EC

Maintain ECNs

EC

Print ECN Impact Report

EC

Print ECN Traveler

EM

Assign Beneficiaries to Benefit Plans

EM

Assign Dependents to Benefit Plans

EM

Authorized Labor Categories

EM

Auto Load Employee Deferred Compensation Info

EM

Basic Employee Info

EM

Company Issued Documents By Employee

EM

Company Property Issued To Employee

EM

Company Vehicles By Employee

EM

Deferred Comp Beneficiary Info

EM

Detail Position Descriptions

EM

Education, Skills & Training Data

EM

Employee Benefit Elections

EM

Employee Bond Table

EM

Employee COBRA Dependents

EM

Employee Contributions

EM

Employee Deductions

EM

Employee Deferred Compensation Info

EM

Employee Dependent Care FSA Elections

EM

Employee Dependents/Beneficiaries

EM

Employee Drug Testing Results

EM

Employee Government Mandated Orders

EM

Employee Leave

EM

Employee Medical Care FSA Elections

EM

Employee Medical Surveillance

EM

Employee Qualifying Events

EM

Employee Related Parties

EM

Employee Taxes

EM

Maintain Dependent Care History

EM

Maintain Employee Allowances

EM

Maintain Employee Exit Interview Info

EM

Maintain Employee FSA Elections

EM

Maintain Employee Master

EM

Maintain Employee Review Info

EM

Maintain Leave Beginning Balances

EM

Maintain Medical Care History

EM

Managers/HR Reps by Org

EM

Mass Update Employee Package Deductions

EM

Print Completed Exit Interview Form

EM

Print Completed Review Form

EM

Print Coupon Book/Create Invoice

EM

Print Employee Basic Report

EM

Print Employee Medical Surveillance Data

EM

Print Employee Salary Info and History Rpt

EM

Print Employees By Job Title

EM

Print Notification Letters

EM

Print Position Descriptions

EM

Print Remittance of Government Mandated Orders

EM

Print Review Form Template

EM

Print Review Statistics By Employee

EM

Request Dependent Care Reimbursement

EM

Request Medical Care Reimbursement

EM

Salary Info and History

EM

Security Status By Employee

EM

State Driver License By Employee

EM

Track COBRA Elections

EM

Update Employees for Manager Change

GL

Account Activity Inquiry

GL

Create Preliminary Cash Flow Statement

GL

Currency Balance and Adjustments

GL

Edit Preliminary Cash Flow Statements

GL

G/L Inquiry

GL

G/L Inquiry-Budget and Prior Year Comparison

GL

Labor History to General Ledger Comparison

GL

Maintain Account/Org Links

GL

Maintain Non-Project Beginning Balances

GL

Maintain Org Elements

GL

Maintain Org/Account Budgets

GL

Maintain Organization User-Defined Info

GL

Maintain Prior Year Non-Project Beginning Balances

GL

Maintain Prior Year Project Beginning Balances

GL

Maintain Ref/Account/Org Links

GL

Mass Link Account/Orgs

GL

Mass Link Ref/Account/Orgs

GL

Print Account/Org Listing

GL

Print Bank Statement Report

GL

Print Financial Statement Detail

GL

Print Financial Statements

GL

Print G/L Budgets

GL

Print General Ledger Detail

GL

Print General Ledger Posting Summary

GL

Print Intercompany Receivable Edit Report

GL

Print JE Edit Reports

GL

Print JE Posting Summaries

GL

Print Organizational Listing

GL

Print Project Ledger Detail

GL

Print Project Trial Balance

GL

Print Trial Balance

GL

Reverse Posted JE

HA

Print Employee Roster

HA

Print New Hire Report

HA

Print Promotion Report

HA

Print Termination Report

HA

Print Training Report

HA

Print Transfer Report

HB

Print Census Report

HB

Print Employee FSA Report

HB

Print Life Insurance Beneficiaries Report

HB

Print Medical Dependents Report

HC

Notification Inquiry

HC

Print COBRA Elections Report

HC

Print Employee Dependents Report

HC

Print Payments Report

HK

Print Annual Additions (415) Rpt

HK

Print New Eligible Employees

HK

Print Vesting Percents by Employee

HP

Accident Info

HP

Approve Position Requisitions

HP

Certification

HP

I-9 Data

HP

Position Requisition Request

HP

Print Accident Case History Report

HP

Print OSHA 200 Report

HP

Print Wage History Report

HP

Print Worker's Comp Incident Report

HP

Requisition Approvers

HS

Compensation Budget By Organization

HS

Print Budgeted Vs. Actual Compensation Report

HS

Print Compa-ratio

HS

Print Employees By Plan By Grade

HS

Print Increase Pool Report

HS

Print Performance Review Schedule

HS

Print Review Statistics By Manager

HS

Print/Send Performance Review Schedule

IW

Create IWO Allocations

IW

Export IWO Allocations

IW

IWO Project Setup

IW

Maintain IWO Allowances

IW

Maintain IWO Transfer History

LD

Conversion of Crew Timesheets

LD

Employee Labor Inquiry

LD

Employee Project TS Defaults

LD

Employee Project-Acct-Grp TS Defaults

LD

Employee Timesheet Line Type Defaults

LD

Enter Correcting Timesheets

LD

Enter Crew Timesheets

LD

Enter Timesheets

LD

Mass Update of Fringes

LD

Print Employee Labor Summary Rpt

LD

Print Labor Utilization Report

LD

Print Missing Timesheet Rpt

LD

Print TS Edit By Acct Rpt

LD

Print TS Edit By Crew Rpt

LD

Print TS Edit By Empl Rpt

LD

Print Tiered Fringe Analysis Report

LD

Print Timesheet History Rpt

LD

Purge Crew Timesheets

LD

Timesheet History Inquiry

LV

Leave Code Reassignment

LV

Leave History Inquiry

LV

Maintain Leave Edit Table

LV

Print Accrued Leave Report

LV

Print Employee Leave Report

LV

Print Leave Edit Report

PC

Create MO Subcontractor Requisitions

PC

Enter MO Operation Completions

PC

Enter MO QC Inspection Results

PC

Enter Manufacturing Orders

PC

Expedite Manufacturing Orders

PC

Manufacturing Order Status Inquiry

PC

Modify MO Costs

PC

Modify MO Labor Costs

PC

Print Component Shortage Report

PC

Print MO Cost Report

PC

Print Manufacturing Order Documentation

PC

Process Material Requirements

PC

Relieve Manufacturing Orders

PI

Print C/SSR Report

PI

Print Organization Cost Summary

PI

Print Project Labor Summary

PI

Print Project Master Reports

PI

Print Project Non-Labor Detail

PI

Print Project Setup Report

PI

Print Project Status Report

PI

Print Project Work Force

PI

Print Revenue Summaries

PI

Print Revenue Worksheet

PI

Print T&M Analysis

PI

Project Inquiry

PI

Project Inquiry by Level

PI

Project Ledger Inquiry

PJ

Alternate Reporting

PJ

Assign PLC to Employee Work Force

PJ

Assign PLC to Projects

PJ

Assign PLC to Vendor Work Force

PJ

Assign Standard Text

PJ

Basic Info

PJ

Basic Revenue Info

PJ

CLIN Information

PJ

Cost of Goods Sold

PJ

Define Rate Sequence

PJ

Deliverables

PJ

Enter Change Orders

PJ

Government Contract Info

PJ

Link GLC to Project PLC

PJ

Maintain Burden Fee Overrides

PJ

Maintain Cost Fee Overrides

PJ

Maintain Labor Summary

PJ

Maintain Multiplier Overrides

PJ

Maintain Project Master

PJ

Maintain Revenue Formulas

PJ

Maintain Valid Project/Account/Orgs

PJ

Mass Link Projects/Accounts/Organizations

PJ

Modifications

PJ

Prior Year Billable Value Amounts

PJ

Prior Year Cost and Revenue

PJ

Prior Year Labor Summary

PJ

Prior Year T&M Revenue

PJ

Prior Year Unit Revenue

PJ

Project Billing Info

PJ

Project Burden Cost Ceilings

PJ

Project Direct Cost Ceilings

PJ

Project Employee Hours Ceilings

PJ

Project Employee Work Force

PJ

Project Hours Ceilings

PJ

Project PLC Rates

PJ

Project PLC By Employee/Vendor

PJ

Project Total Ceilings

PJ

Project Unit Pricing

PJ

Project Vendor Hours Ceilings

PJ

Project Vendor Work Force

PJ

Project Work Force Billing Rates

PJ

User-Defined Info

PP

Approve Purchase Requisition Lines

PP

Approve Purchase Requisitions

PP

Assign Requisition Lines to Buyers

PP

Assign Requisitions to Buyers

PP

Create Purchase Orders

PP

Enter Requisitions

PP

Requisition Processing

PP

Requisition Processing by Line

PR

A/P Payroll Liability History

PR

A/P Voucher Status Report

PR

Basic Employee Info Inquiry

PR

Create A/P Vouchers for Payroll Liabilities

PR

Edit W2s

PR

Employee Earnings Inquiry

PR

Employee Project TS Defaults

PR

Employee Project-Acct-Grp TS Defaults

PR

Employee User-Defined Info

PR

Maintain Employee Bank Info

PR

Maintain Employee Earnings

PR

Maintain Payroll Edit Table

PR

Payroll Contributions Inquiry

PR

Payroll Deductions Inquiry

PR

Payroll Edit Table Inquiry

PR

Payroll Taxes Inquiry

PR

Print Certified Payroll Rpt

PR

Print Deduction Summary Rpt

PR

Print Deduction/Benefit Rpt By Local

PR

Print Employee Bank Info Rpt

PR

Print Employee Earnings Rpt

PR

Print Payroll Edit Report

PR

Print History of Arrears Deduction Report

PR

Print Weekly Fringe Stamp Report

PR

Void/Replace Posted Paychecks

PR

Salary Info and History Inquiry

TR

Schedule Trips

 

Code

Module

AP

Accounts Payable

BD

Budgeting & ETC

BL

Billing

CR

Cost & Revenue Processing

EC

Engineering Change Notices

EM

Employee

GL

General Ledger

HA

Affirmative Action

HB

Benefits

HC

COBRA

HK

Deferred Compensation Administration

HP

Personnel Administration

HS

Human Resources/Compensation Administration

IW

Inter-Company Work Orders

LD

Labor

LV

Leave

PC

Production Control

PI

Projects/Inquiry & Reporting

PJ

Projects/Project Setup

PR

Payroll

TR

Travel