Effect of Security on the Analytics

Costpoint Analytics security enables you to control access to the following:

  • Analytics tabs

  • Data, based on organization

  • Data, based on project manager

  • Designer/developer tools

In this topic

Analytics Tabs Access

Organization Access

Reorganization Access

Project Data Access Based on Project Manager

Revenue Access

Profit Access

Backlog Access

Projects at Risk Access

AR and DSO Access

Ad Hoc Data Discovery Access

Labor Utilization Access

Summary Analytics Access

User Options Access

Designer/Developer Access

 

Analytics Tabs Access

When you run Costpoint Analytics, the only tabs displayed are those to which you are granted access through your user group. You may have access to all analytics tabs or only to a limited set of them.

Organization Access

When you run Costpoint Analytics, you can only display data for the set of organizations to which you are granted access in Costpoint Analytics security.

When You View Project Data Based on Owning Organization

When you view project data based on owning organization on the Summary Dashboard or in the Revenue Analytics, Profit Analytics, Backlog Analytics, and Projects at Risk Analytics, you can view and analyze all data for projects that are owned by the organizations to which you have access.

Whether or not access to an owning organization automatically extends to lower-level organizations in the organization hierarchy depends on how you set up Costpoint Analytics security. When you grant access to an organization, you also have the option to grant access to all lower-level organizations below that organization in the hierarchy.

If the Owning Organization for a Project Changes

If the owning organization for a project changes, Costpoint Analytics always bases access to that project’s data on the most recent owning organization.

For example, organization 1.1 was the owning organization for a project initially but later organization 1.2 became the owning organization.

When You View Project Data Based on Performing Organization

When you view project data based on performing organization in the Revenue Analytics or Profit Analytics, you can only view and analyze project data originating from transactions that were charged to the organizations to which you have access.

The option to view data based on performing organization does not apply to the Summary Dashboard, the Backlog Analytics, or the Projects at Risk Analytics. Data in those analytics is always based on owning organization.

Whether or not access to a performing organization automatically extends to lower-level organizations in the organization hierarchy depends on how you set up Costpoint Analytics security. When you grant access to an organization, you also have the option to grant access to all lower-level organizations below that organization in the hierarchy.

When You View Labor Utilization Data

Organization access for the Labor Utilization Analytics is based on either employees’ home organizations or their security organizations. You select one of these options in Costpoint Analytics – Employee Configuration.

In either case, when you view data in the Labor Utilization Analytics, you can view and analyze all cost for an employee if you have access to that employee’s home or security organization.

If an Employee’s Organization Changes

If an employee’s organization (home or security organization, whichever Costpoint Analytics access is based on) changes, Costpoint Analytics always bases access to that employee’s data on the most recent organization.

For example, organization 1.1 was the home organization for an employee initially but later organization 1.2 became that employee’s home organization.

Organization Security and Filter Lists

The set of organizations to which you have access in Costpoint Analytics also determines the filter options available to you.

For example, if you view project analytics by owning organization and a project manager has no projects that are owned by the organizations to which you have access, that manager does not appear in the list of possible filter values in the Project Manager filter list.

Reorganization Access

As you work with the analytics, you have the option on the User Options tab to view data based on your firm’s organization structure or on any of the reorganization structures established in Costpoint.

When you view and filter analytics based on reorganizations, your access to data is based on your access to the organizations represented by the reorganizations. As a result, if you have access to some of the organizations making up a reorganization but not to all, the data available to you for that reorganization is likely to be incomplete.

For example, you have access to data for organizations 1.1 and 1.2 in Costpoint Analytics. You decide to analyze data for reorganization A.1. Organizations 1.1, 1.2, and 1.3 are linked to that reorganization. Because the data you can view is restricted by your organization access, the reorganization A.1 data available to you for analysis includes data for organizations 1.1 and 1.2 but does not include data for 1.3.

Project Data Access Based on Project Manager

For Costpoint Analytics users that are subject to project manager security, access to project data in the project analytics (Revenue, Profit, Backlog, and Projects at Risk) is limited to his or her own projects or, if the user is a program manager, the projects assigned to those project managers.

For a more complete description of project manager security, see Project Manager Security: Key Concepts and related topics.

Costpoint Analytics SaaS: If you have a Costpoint Analytics SaaS Subscription, the option to set up security based on project manager is not available.

Revenue Access

The Revenue tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or REVENUE on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

When you view data based on owning organization in Revenue Analytics, you can view and analyze all data for revenue-level projects that are owned by the organizations to which you have access. Your access includes the ability to analyze revenue generated by those projects even if the revenue, at the transaction level, is charged to an organization for which you do not have access rights.

When you view data based on performing organization in Revenue Analytics, you can only view and analyze revenue from transactions charged to the organizations for which you have access. Thus, if you have access rights for some of the performing organizations for a project but not all, the revenue data available to you in Costpoint Analytics for that project may not be complete when you view it based on performing organization.

Profit Access

The Profit tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or PROFIT on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

When you view data based on owning organization in Profit Analytics, you can view and analyze all profit data for revenue-level projects that are owned by the organizations to which you have access. Your access includes the ability to analyze profit generated by those projects even if the revenue and expenses, at the transaction level, are charged to organizations for which you do not have access rights.

When you view data based on performing organization in Profit Analytics, you can only view and analyze profit data from transactions charged to the organizations for which you have access. Thus, if you have access rights for some of the performing organizations for a project but not all, the profit data available to you in Costpoint Analytics for that project may not be complete when you view it based on performing organization.

Backlog Access

The Backlog tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or BACKLOG on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

When you view data in Backlog Analytics, you can view and analyze all backlog data for revenue-level projects that are owned by the organizations to which you have access. Your access includes the ability to analyze backlog for those projects even if the revenue, at the transaction level, is charged to an organization for which you do not have access rights.

The option to view analytics by performing organization does not apply to Backlog Analytics.

Projects at Risk Access

The Projects at Risk tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or PAR on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

When you view data in Projects at Risk Analytics, you can view and analyze all risk data for risk-level projects that are owned by the organizations to which you have access. (“Risk-level projects” for billing-based risk reasons are billing-level projects. For all other risk reasons, they are revenue-level projects.) Your access includes the ability to analyze risk for those projects even if the billing, revenue, or expenses, at the transaction level, are charged to organizations for which you do not have access rights.

The option to view analytics by performing organization does not apply to Projects at Risk Analytics.

AR and DSO Access

The AR and DSO tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or AR_DSO on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

When you view data based on owning organization in AR and DSO Analytics, you can view and analyze all AR and DSO data for top-level projects that are owned by the organizations to which you have access.

The option to view analytics by performing organization does not apply to AR and DSO Analytics.

Ad Hoc Data Discovery Access

The Ad Hoc Data Discovery tab in Costpoint Analytics – Project is only available to members of user groups for which either ALLTABSACCESS or PROJECTS_AHDD on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

Which dimensions display in the Ad Hoc Data Discovery table is controlled by the same security settings that control your access to data on the other analytic tabs. For example, the organization access that your system administrator sets up for your Costpoint Analytics user role determines the organizations for which you can view metric values in the table.

Which metric values display in the Ad Hoc Data Discovery table is controlled by the tab security settings that control your access to the other analytic tabs. If you select a metric associated with a tab to which you do not have access, the table does not display data for that metric. For example, if you select one of the backlog metrics but you do not have access to the Backlog tab, the table does not display data for that backlog metric.

Labor Utilization Access

The Labor Utilization tab in Costpoint Analytics – Employee is only available to members of user groups for which either ALLTABSACCESS or LU on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

When you view data in Labor Utilization Analytics, you can view and analyze labor utilization data for employees whose home or security organizations, whichever you base security on, are among the organizations to which your user group has access.

In addition, if LABORCOSTACCESS for your user ID in the USERS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx contains N, you cannot view labor cost data, and you do not have the option to calculate labor utilization rates based on labor cost.

Summary Analytics Access

The Summary Dashboard tab in Costpoint Analytics – Summary is only available to members of user groups for which either ALLTABSACCESS or SUMMARY on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

In addition, access to the individual summary analytics on the Summary Dashboard tab are subject to any access restrictions for the corresponding detailed analytics tabs, as described above. For example, if you do not have access to the Profit tab in Costpoint Analytics – Project, the summary profit analytics are not displayed on the Summary Dashboard tab. Costpoint Analytics also enforces organization access when it displays organizations in the Org filter lists on the Summary Dashboard tab and calculates summary data.

If a user is not allowed to view labor cost in the detailed Labor Utilization Analytics, the option to view summary labor utilization data based on labor cost on the Summary Dashboard tab is not available.    

User Options Access

The User Options tabs in Costpoint Analytics – Project, Costpoint Analytics – Employee, and Costpoint Analytics – Summary are only available to members of user groups for which either ALLTABSACCESS or USEROPTIONS on the USERGROUPS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains Y.

In addition, security applied to other tabs can affect the user options that are available on the User Options tabs:

Designer/Developer Access

If QVACCESS for a user ID in the USERS worksheet in the CostpointAnalyticsOrgSecuritySetup.xlsx file contains ADMIN, that user can create new analytic objects and new tabs within Costpoint Analytics. If QVACCESS contains USER, they cannot add objects or tabs.

Be aware that users with ADMIN in QVACCESS can create objects that display any data that is available in Costpoint Analytics. You cannot give access to some data items and deny access to others.

Costpoint Analytics SaaS: If you have a Costpoint Analytics SaaS Subscription, this setting does not apply. All users can extend the analytics using shared objects, but no one, including a user with ADMIN in QVACCESS, can modify the underlying .QVWs or the data model.