This section defines the primary roles and special groups in PM Compass.
Primary roles define the type of operations the user can perform, for example, update baselines, set budget equal to actual costs, and update data. PM Compass does not all allow overwriting of the primary role like other EPM products.
When Deltek EPM Security Administrator (SA) runs, you create roles that identify super users, which usually include analysts, from novice users (Control Account Manager). For example, assume that an EPM application has eight users. You add these eight users through the EPM SA using Active Directory.
You can define each of these users to have one of the following roles as primary role:
Scheduler — This role refers to a super user of Open Plan with limited access to baseline and cost information.
Analyst — This role refers to a super user of Cobra with access to all areas of the application.
CAM — CAM stands for Control Account Manager. This role refers to a technical person who is working on a process with limited access to processes but is essential for providing status and details, such as explanation of variance.
Project Manager — This role refers to a user that has read access to all data, but has limited rights to modify the data.
For each of these primary roles, you define the menu options to which the user has access. For each user, you select the role as their primary role. You then assign these users a license to a product that they should be able to access.
If a user is not given a primary role, the role titled DEFAULT is used to identity the menu options that the user has rights to access.
There are two special groups in PM Compass:
WORLD — All users that you define in EPM SA automatically become members of the WORLD group in PM Compass. This group, however, does not exist in the Group list in EPM SA. Thus, you can neither remove nor add users. You cannot also define security permissions for this group.
In EPM SA, the SYSADMIN and GUEST groups are created automatically. You can find these groups in the Group list.
When the WORLD group is assigned on the Access Control tab, all users defined in EPM SA have full access to an entity and for all demo data.
SYSADMIN — Users in this group have rights to all menus in EPM products, including the Access Control tab used to set access control to files. Moreover, members of this group have access to the EPM SA.