Clarity v12 Security Design Chart

Embed Size (px)

Citation preview

  • 8/8/2019 Clarity v12 Security Design Chart

    1/117

    Clarity Security Group

    1 of 117 12/06/2010 47437720.xls

    ID Security Group Name

    0_Subcontractors Time Entry 0_Subcontractors Time Entry AInfor Employee 1_ Infor Employee A

    Infor Project Manager 2_ PSO Project Manager A

    Infor Resource Manager 3_ PSO Resource Manager A4_ Executive A

    5_ Project Creator A

    60_AMER PSO Ops A

    61_APAC PSO Ops A

    62_EMEA PSO Ops A

    63_COE PSO Ops A

    7_ Finance A

    80_AMER PA A

    81_APAC PA A

    82_EMEA PA A

    90_ Help Desk A

    91_Clarity Support A92_ Clarity Admin and Dev A

    93_ Job Monitors A

    951_KnowStore: Development A

    ProductionStatus

  • 8/8/2019 Clarity v12 Security Design Chart

    2/117

    Clarity Security Group

    2 of 117 12/06/2010

    Sec

    Active

    Security Group Name

    A 0_Subcontractors Time Entry

    A 1_ Infor Employee

    A 2_ PSO Project Manager

    A 3_ PSO Resource Manager

    A 4_ Executive

    A 5_ Project Creator

    A 62_EMEA PSO Ops

    A 60_AMER PSO Ops

    A 61_APAC PSO Ops

    A 7_ Finance

    A 80_AMER PA

    A 81_APAC PA

    A 82_EMEA PA

    A 90_ Help Desk

    A 91_Clarity Support

    A 92_ Clarity Admin and Dev

    Su

    bcontractor(no

    access)

  • 8/8/2019 Clarity v12 Security Design Chart

    3/117

    Name Description Groups Individual OBS

    No groups

    none

    Subcontractor Consultant 0_Subcontractors Time Entry

    none

    Consultant 1_Infor Employee

    none

    Project Manager

    Resource Manager

    Executive

    PSO Administrator

    none

    Accounting

    none

    Billing

    none

    IT Help Desk

    none

    Clarity Support

    none

    Clarity Dev & Admin

    none

    Regional Add-onGroups

    Subcontractor (noaccess)

    For subcontractors whose time is tracked inClarity, but who do not access the Clarity

    application themselves. Select this profile ifsomeone else will input time on behalf of theconsultant.

    For subcontractors who will access Clarity toenter their own time. This profile providesminimal access to timesheets and view-onlyaccess to the projects that the subcon isworking on.

    For the majority of Infor employees who willuse Clarity for time tracking. This includes theability to see the basic information of projectsthey are assigned to, as well as access to theKnowledge Store and some portlets andreports.

    For a consultant who acts as a projectmanager on some projects. This profileprovides access to some additional reports andportlets, as well as the ability to book roles toprojects, view resources, and use projectmanagement features.

    1_Infor Employee2_ PSO Project Manager

    Project - View

    Project - View D

    For a PSO manager who manages bothprojects and resources. This profile providesadditional access to resource data and theability to book resources to projects. Alsoincludes the ability to edit the baseline of aproject.

    1_Infor Employee2_ PSO Project Manager3_ PSO Resource Manager

    Resource - HardProject - EditProject - View D

    Access to run all reports and portlets in Clarity.Also includes access to portfolios and risks,

    issues, and change requests

    1_Infor Employee2_ PSO Project Manager3_ PSO Resource Manager

    4_ Executive

    Project - EditProject - View DResource - Hard

    For Operations staff or admins - includes theability to create projects and edit rate and costmatrices.

    1_Infor Employee2_ PSO Project Manager3_ PSO Resource Manager4_ Executive5_ Project Creator

    60_AMER PSO Ops61_APAC PSO Ops62_EMEA PSO Ops63_COE PSO Ops

    For Finance staff who will not be performingbilling functions in Clarity. Provides ability torun all reports and portlets and view dataglobally.

    1_Infor Employee2_ PSO Project Manager7_ Finance

    For Finance staff who will be performing billingfunctions inside of Clarity.

    1_Infor Employee2_ PSO Project Manager7_ Finance

    80_AMER PA81_APAC PA82_EMEA PA

    Global Helpdesk staff who will reset passwords

    and other tier 1 support.

    1_Infor Employee

    90_Help Desk

    IT Tier 2 support staff, excludes some rightsreserved for Global Admin and Development.

    1_Infor Employee91_Clarity Support93_Job Monitors

    All administrative access rights includingaccess to Studio and XOG.

    1_Infor Employee92_Clarity Dev and Admin93_Job Monitors

  • 8/8/2019 Clarity v12 Security Design Chart

    4/117

    Group Access Right

    0_Subcontractors Time Entry Page - View

    0_Subcontractors Time Entry Portlet - View

    1_Infor Employee Page - View

    1_Infor Employee Page - View

    1_Infor Employee Page - View

    1_Infor Employee Page - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Portlet - View

    1_Infor Employee Report - Run

    1_Infor Employee Report - Run1_Infor Employee Report - Run

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

    2_PSO Project Manager Page - View

  • 8/8/2019 Clarity v12 Security Design Chart

    5/117

    2_PSO Project Manager Page - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Portlet - View

  • 8/8/2019 Clarity v12 Security Design Chart

    6/117

    2_PSO Project Manager Portlet - View

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

  • 8/8/2019 Clarity v12 Security Design Chart

    7/117

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    2_PSO Project Manager Report - Run

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Page - View

    3_PSO Resource Manager Portlet - View

    3_PSO Resource Manager Portlet - View

    3_PSO Resource Manager Portlet - View3_PSO Resource Manager Portlet - View

    3_PSO Resource Manager Portlet - View

    3_PSO Resource Manager Portlet - View

    3_PSO Resource Manager Portlet - View

    3_PSO Resource Manager Report - Run

    7_Finance Job - Run

    90_Help Desk Page - View

    90_Help Desk Page - View

  • 8/8/2019 Clarity v12 Security Design Chart

    8/117

    90_Help Desk Page - View

    90_Help Desk Page - View

    90_Help Desk Page - View

    90_Help Desk Page - View

    90_Help Desk Page - View

    90_Help Desk Portlet - View

    90_Help Desk Portlet - View

    90_Help Desk Portlet - View

    90_Help Desk Portlet - View90_Help Desk Portlet - View

  • 8/8/2019 Clarity v12 Security Design Chart

    9/117

    Instance ID

    XM Expense Management Frame InforFrameExpense

    XM Expense Entry Form i2_xm_expense

    Clarity Rollout ClarityRollout

    Clarity Support Clarity_Support

    XM Expense Management Frame InforFrameExpense

    XM Support XMSupport

    Issues By Priority cop.issuesByPriorityLinkable

    My Reports reporting.myReportsNotifications personal.notificationsNugget

    P001 - Clarity News and Information P001_Clarity_News_and_Information

    P037 - Revenue by Resource p037_revenue_by_resource

    P226 - CL XM Cycle CLXMCycle

    P501 Support ITHelpDesk

    P502 XM Cycle XMCycleCL

    P503 - Rollout Schedule Rollout

    Site Links personal.siteLinks

    Timesheets to Approve projmgr.timesheetAdmin

    XM Expense Entry i2_xm_expense

    Resource Assignments

    Resource CalendarTimesheet Detail

    Billing SYSTEM5000144

    Forecasting Leakage

    Invoice Approval page_invoiceapproval

    P260A Timesheet Detail P260ATIMESHEETDETAIL

    Project Dashboard copProjectManagerDashboard

    Project POC PP250bc

    Project POC ProjectPOCTab

    Project Setup ProjectCrossRef

    PSO PM Dashboard PSOPMDashboard

    PSO Project Manager InforPSOPM

    PSO Project Manager InforPSOPMFRAME

    Rate Matrix billingapproval

  • 8/8/2019 Clarity v12 Security Design Chart

    10/117

    Transactions Transactions

    Events calendar.homeEvents

    Gantt Gantt

    Late Tasks and Milestones cop.lateTasksMilestonesLinkable

    P000 - Under Development underdevelopmentP034 Leakage leakage_portlet

    P035 Backlog Backlog

    P038 - Dormant Projects dormant_projects

    P039 Verify Project Rates verify_project_rates

    P040 - PM Time Status P040 - PM Time Status New

    P041 Verify Rate Matrix verify_rate_matrix

    P042 - Outstanding Invoices p042_outstanding_invoices

    P043 - Clarity Bookings p043-Clarity Bookings

    P049-Backlog P049_Backlog

    P053-Booking Status projmgr.bookingStatus

    P085 Billable Hours billable_hours

    P154 Invoice by Status MJ01-invoiceByStatusP200 - Unapproved Time p200 - Unapproved Time

    P201 - Transaction Table p201_transaction_dump

    P201b - Transaction Values p201b_transaction_values

    P201c - Transaction AP Values p201c_transaction_ap_values

    P202 - Billings Table p202_billings_dump

    P203 - Projected Revenue p203_projected_revenue

    P206 - Invalid Invoices p206_invalid_invoices

    P209a Invoice Headers p209a_invoice_headers

    P209b Invoice Details p209b_invoice_details

    P211 - Billing Pre-Approvals p211_pre_approved_bills

    P211b - Pre-approved Billings p211b_pre_approved_billings

    P211w - Pre-Approved WIP p211w_pre_approved_wipP213 - Billing Approved Bills p213_approved_bills

    P215 - Invoice Lines p215_invoice_lines

    P219 - Eligible Billings p219_eligible_billings

    P220 - Unapproved/Open for Time Entry Projects ote_unapproved_projects

    P221 - Posted Time against Unapproved Projects unapproved_project_time

    P228 - PM Schedule Dashboard cop.projectManagerScheduleDashboard

    P232 - Invalid Transactions p232_invalid_transactions

    P240 -Rejected Invoice Status p240RejectedInvoiceStatus

    P245- Billing Access Audit p245_bililng_access_audit

    P250a - Lookup Project Percentage of Completion P250a

    P250b - Project Percentage of Completion P250b

    P250c - Task Percentage of Completion P250cP251 - Project Listing p251 - Project Listing

    P255 - Subcontractor Margin p255 - Subcontractor Margin

    P255 - Subcontractor Reconciliation p255 - Subcontractor Reconcillation

    P260 Timesheet P260TimesheetReproduction

    P260A Timesheet Detail P260A TIMESHEET DETAIL

    Schedule Performance - 30 Day Outlook cop.schedulePerformance

    Schedule Performance Details cop.schedulePerformanceLinkable

    Timesheets to Approve projmgr.timesheetAdmin

  • 8/8/2019 Clarity v12 Security Design Chart

    11/117

    Weekly Detail projmgr.weeklyDetail

    Company Invoice

    Key Tasks and Milestone Status

    Missing Time Report

    P044 - Customer Project Transactions Report

    P270 - Billing Details Report

    Pre-Billing Report V2

    Program Schedule Review Report

    Project Analysis and Profitability Report

    Project Listing

    Project Snapshot

    Project Stoplight

    Project Transactions Inquiry

    Resource Utilization - Forecasted

    Resource Utilization - Forecasted Detail

    Resource Utilization - History

  • 8/8/2019 Clarity v12 Security Design Chart

    12/117

    Skills Listing

    Transactions Inquiry

    Unfilled Roles

    Allocations projmgr.allocations

    Billable Hours BillableHours

    Capacity projmgr.capacity

    Customer Lookup SYSTEM5000145

    HCM HCM

    Project Setup SYSTEM5000152

    PSO Resource Manager InforPSORMFRAME

    PSO Resource Manager InforPSORM

    Resource Planning projmgr.resourcePlanning

    Unapproved Time SYSTEM5000146

    Workloads projmgr.workloads

    P047 Resource ID hcm_personal_information

    P204-Employee Classification employee_classification

    P225 - Resource Validation p225_resource_validationP227 - Infor Company List InforCompanyList

    Resource Workloads projmgr.resourceWorkloads

    Role Capacity projmgr.roleCapacity

    Unfilled Allocations projmgr.unfilledAllocations

    Resource Bench

    P230 - WIP Accruals

    Administration inforframeadminFRAME

    HCM ID hcmid

  • 8/8/2019 Clarity v12 Security Design Chart

    13/117

    Interface Mgt interfaceMgt

    Invoice Approval page_invoiceapproval

    Notifications notifications

    Resource Classification employeeclassification

    Security Settings securitysettings

    P000 - Under Development underdevelopment

    P046 Supressed Notifications suppressed_notifications

    P047 Resource ID hcm_personal_information

    P099 - Current Sessions infor_current_sessionsP100 - Session Audit infor_session_audit

  • 8/8/2019 Clarity v12 Security Design Chart

    14/117

    Group Access Right Description

    4_Executive Project - View Documents

    60_AMER PSO Ops Project - View Documents

    61_APAC PSO Ops Project - View Documents

    62_EMEA PSO Ops Project - View Documents

    63_COE PSO Ops Project - View Documents

    7_Infor Finance Project - View Documents

    Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.

    Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.

    Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.

    Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.

    Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.

  • 8/8/2019 Clarity v12 Security Design Chart

    15/117

    Instance or OBS level

    Geography:Infor Unit and descendants

    Organization:Infor Unit and descendants

    Organization:Centre of Excellence Unit and

    descendantsOrganization:IBU Unit and descendantsOrganization:Americas Unit and descendants

    Organization:Centre of Excellence Unit anddescendantsOrganization:APAC Unit and descendantsOrganization:IBU Unit and descendants

    Organization:Centre of Excellence Unit anddescendantsOrganization:EMEA Unit and descendantsOrganization:IBU Unit and descendants

    Organization:Centre of Excellence Unit anddescendants

  • 8/8/2019 Clarity v12 Security Design Chart

    16/117

    Group Access Right Description

    0_Subcontractors Time Entry Knowledge Store - Access

    0_Subcontractors Time Entry Timesheets - Navigate

    1_Infor Employee Knowledge Store - Access

    1_Infor Employee Project - View Tasks - All

    1_Infor Employee Reports - Access

    1_Infor Employee Software Download - JRE Grants access to download the JRE from account settings page.

    1_Infor Employee Grants access to download Open Workbench from account settings page.

    1_Infor Employee Grants access to download the SVG Viewer from account settings page.

    1_Infor Employee Timesheets - Navigate

    2_PSO Project Manager Management - Programs

    2_PSO Project Manager Allow scheduling in the browser.

    2_PSO Project Manager Project - Benefit Plan - Edit All Allows resource to edit all the Project benefit plans.

    2_PSO Project Manager Project - Budget Plan - Edit All Allows resource to edit all the Project budget plans.

    2_PSO Project Manager Project - Cost Plan - Edit All Allows resource to edit all the project cost plans.

    2_PSO Project Manager

    2_PSO Project Manager Allows resource to submit all the project financial plans for approval.

    2_PSO Project Manager Project - Modify Baseline - All

    2_PSO Project Manager Resource - Navigate

    2_PSO Project Manager Resource - View - All

    2_PSO Project Manager

    3_PSO Resource Manager Portfol io - Create Allows user to create Portfol ios. Includes the Portfol io - Navigate right.

    3_PSO Resource Manager Portfolio - Navigate Access to the portfolio management pages

    3_PSO Resource Manager

    3_PSO Resource Manager

    3_PSO Resource Manager Resource - External Access

    3_PSO Resource Manager Resource - Update Skills

    3_PSO Resource Manager Resource Change - View All

    3_PSO Resource Manager

    4_Executive Page Viewer - All

    4_Executive Portfolio - View All Allows viewing of all portfolios

    4_Executive Portlet Viewer - All Allows resource to view all portlets and add them to pages.

    4_Executive Reports - Access

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Allows resource to access the timesheets list page. The resource will only be able timesheets the resource has edit or approve timesheets rights over.

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Allows resource to view the tasks and work breakdown structure for all project to wthe resource has access.

    Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.

    Software Download - OpenWorkbench

    Software Download - SVGViewer

    Allows resource to access the timesheets list page. The resource will only be able timesheets the resource has edit or approve timesheets rights over.

    Allowed resource access to the Program Management features for programs and

    projects the resource has access to. This right is dependent on the resource havinrights to programs and projects at either the instance level or OBS level.

    Management - Schedule InBrowser

    Project - Create/EditRequisitions - All

    Allows user to create and edit all requisitions. This right includes the right to navigathe requisition pages.

    Project - Financial Plan -Submit All for Approval

    Allows resource to baseline all projects which has been enabled for Management.

    rights also allows resource to view the general project properties and processes.Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which resource has access.

    Allows resource to view all resources and their information except the financial proof the resource. This right is dependent on Resource - Navigate being granted.

    Resource - View Financial -All

    Allows user to view financial properties on all resources. This right is dependent onResource - Navigate being granted.

    Project - Attach RequisitionsEntry Resources - All

    Allows user to attach resources to all requisition entries. This right includes the righnavigate to the requisition pages, but does not include the right to create newrequisitions or entries.

    Project - Create/Edit

    Requisitions - All

    Allows user to create and edit all requisitions. This right includes the right to naviga

    the requisition pages.

    Allows access to the Resource list, Resource Finder and Requisitions. Includes theability to view resource general information, contact information, financial informaticalendar and skills of resources to which the user has been granted Resource - Vie

    Allows resource to create, edit and view skills for resources that the resource has granted Resource - View right for. This right also allows the resource to view resougeneral information, contact information, financial information and calendar, but doallow resource to edit that information. This right is dependent on Resource - Navigbeing granted.

    Allows resource to view all Resource Change objects. This includes the page navigright.

    Resource Change Notes -View All

    Allows resource to view all Resource Change Notes objects. This includes the pagnavigation right.

    Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration Access right.

    Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.

  • 8/8/2019 Clarity v12 Security Design Chart

    17/117

    5_Project Creator Administration - Access

    5_Project Creator Company - View - All Allows resource to view general and supplemental properties of all companies.

    5_Project Creator

    5_Project Creator

    5_Project Creator

    5_Project Creator Knowledge Store - Access

    5_Project Creator Project - Create

    5_Project Creator Project - Enable Financial

    5_Project Creator Project - Billing Access - All

    60_AMER PSO Ops Allows access to Financial Management module in Application Administration.

    60_AMER PSO Ops Allows user to enter transactions (vouchers).

    60_AMER PSO Ops Knowledge Store - Access

    60_AMER PSO Ops Process View Instance - All Allows resource to view all process instances.

    60_AMER PSO Ops Administration - Access

    60_AMER PSO Ops

    61_APAC PSO Ops Allows user to enter transactions (vouchers).

    61_APAC PSO Ops Knowledge Store - Access

    61_APAC PSO Ops Process View Instance - All Allows resource to view all process instances.

    61_APAC PSO Ops Administration - Access

    61_APAC PSO Ops

    62_EMEA PSO Ops

    62_EMEA PSO Ops Allows resource to approve credit memos.

    62_EMEA PSO Ops Allows resource to approve any WIP adjustment.

    62_EMEA PSO Ops Financial Process - Billing

    62_EMEA PSO Ops

    62_EMEA PSO Ops

    62_EMEA PSO Ops Allows resource to enter transactions (vouchers).

    62_EMEA PSO Ops

    62_EMEA PSO Ops Knowledge Store - Access

    62_EMEA PSO Ops Process View Instance - All Allows resource to view all process instances.

    Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.

    Company - View Financial -All

    Allows resource to view financial properties of all companies. This right is dependeother rights providing view capability for Companies, such as the Company - View right etc.

    Financial Maintenance -Define Matrix

    Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.

    Financial Maintenance -Manage Matrix

    Allows resource to define Financial cost/rate matrices. This right allows resource tcreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows mcolumns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Allows resource to create a new project or program specifying general project propA resource granted this right will automatically become the collaboration manager project and will be able to create action items, discussion

    Allows resource to enable financials properties for project to which the resource ha

    access. This right is dependent on the resource having either Project - View, ProjeView Management, Project - View Opportunity or Project Manager right for the proThe resource will also be able to enable financial properties for projects where theresource is a participant or collaboration manager.

    Financial Maintenance -Financial Management

    Financial Process -Transaction Entry

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.

    Financial Maintenance -Manage Matrix

    Allows user to define Financial cost/rate matrices. This right allows user to create, and view Cost/Rate, Administrative or Tax matrices. The right allows matrix columnbe configured and entering of rows to create matrix rules. This right also includes tcapability to copy, delete, test and lock/unlock matrices. This right is dependent onAdministration - Navigate being granted.

    Financial Process -Transaction Entry

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.

    Financial Maintenance -

    Manage Matrix

    Allows user to define Financial cost/rate matrices. This right allows user to create, and view Cost/Rate, Administrative or Tax matrices. The right allows matrix columnbe configured and entering of rows to create matrix rules. This right also includes tcapability to copy, delete, test and lock/unlock matrices. This right is dependent on

    Administration - Navigate being granted.

    Financial Process - ApproveBilling and Credit Memos

    Allows resource to approve or reject billing transactions that resource has billingapproval rights for. This rights also includes the ability to Print Batch Billing.

    Financial Process - ApproveCredit Memo

    Financial Process - ApproveWIP Adjustments

    Allows resource to create bills using demand billing, batch billing, advanced billingre-billing.

    Financial Process - CreditMemo

    Allows resource to create and print credit memos. This right is dependent on the RRun instance right. To allow printing of a credit memo, the resource need to be grathe report instance right called Report - Run for the Customer Invoice Report.

    Financial Process - PrintInvoices

    Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.

    Financial Process -Transaction Entry

    Financial Process - Work inProcess

    Allows access to the WIP screens and allows resource to process WIP for alltransactions in the WIP table.

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

  • 8/8/2019 Clarity v12 Security Design Chart

    18/117

    63_COE PSO Ops Knowledge Store - Access

    63_COE PSO Ops Process View Instance - All Allows resource to view all process instances.

    7_Infor Finance Administration - Access

    7_Infor Finance Company - Edit Financial - All

    7_Infor Finance Company - View - All Allows resource to view general and supplemental properties of all companies.

    7_Infor Finance

    7_Infor Finance

    7_Infor Finance Knowledge Store - Access

    7_Infor Finance

    7_Infor Finance Financial Process - Billing

    7_Infor Finance

    7_Infor Finance Jobs - Access

    7_Infor Finance Page Viewer - All

    7_Infor Finance Portlet Viewer - All Allows resource to view all portlets and add them to pages.

    7_Infor Finance

    7_Infor Finance

    7_Infor Finance Reports - Access

    7_Infor Finance Reports - Run - All

    7_Infor Finance Reports - View Output - All

    7_Infor Finance

    7_Infor Finance

    7_Infor Finance Allows resource to navigate to WIP Accrual Groupings object pages.

    7_Infor Finance

    90_Help Desk Administration - Access

    90_Help Desk Administration - Authorization

    90_Help Desk Knowledge Store - Access

    90_Help Desk

    90_Help Desk

    90_Help Desk Resource - Create

    90_Help Desk Resource - Edit - All

    90_Help Desk Resource - Navigate

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.

    Allows resource to view and edit financial properties of all companies. This right isdependent on other rights providing view capability for Companies, such as theCompany - View - All right etc.

    Financial Maintenance -Define Matrix

    Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.

    Financial Maintenance -Manage Matrix

    Allows resource to define Financial cost/rate matrices. This right allows resource tcreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows mcolumns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Financial Process - Approve

    Billing and Credit Memos

    Allows resource to approve or reject billing transactions that resource has billing

    approval rights for. This rights also includes the ability to Print Batch Billing.Allows user to create bills using demand billing, batch billing, advanced billing, andbilling.

    Financial Process - PrintInvoices

    Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.

    Allows user access to the jobs pages. This right is dependent on either the Jobs - All right or the user being granted instance level rights such as Job - Run, Job - VieOutput or Job - Edit Properties.

    Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration Access right.

    Project - Financial Planning -

    All

    Allows resource to view and edit the financial plan for all projects. This allows the

    resource to enter budgets and forecasts for all projects.Project - Financial PlanningApproval - All

    Allows resource to approve and submit the financial plan for all projects. This right allows resource to enter budgets and forecasts for all projects.

    Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.

    Allows user to run any report. Allows scheduling of any report, editing of the reportproperties for any report and viewing the output of any report. This right is dependeReports - Access being granted.

    Allows resource to view the output of any report. This right is dependent on ReportAccess being granted.

    WIP Accrual Groupings -Create

    Allows resource to create WIP Accrual Groupings objects. This includes the pagenavigation right.

    WIP Accrual Groupings - EditAll

    Allows resource to edit all WIP Accrual Groupings objects. This includes the pagenavigation right.

    WIP Accrual Groupings -Navigate

    WIP Accrual Groupings - ViewAll

    Allows resource to view all WIP Accrual Groupings objects. This includes the pagenavigation right.

    Allows resource access to the Administration Tool only. Does not give access to anparts of the Administration Tool.

    Allows resource to access the authorization and authentication section within theadministration tool. This right includes the Administration - Access right.

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Administration - PartitionModels

    Allows user to manage Partition Models. Does not include the Administration - Navright.

    Resource - AuthorizationAccess Screens

    Allows resource access to Administrator pages for creating, editing and viewingresources. This right is dependent on Administration - Access being granted.

    Allows resource to create a new resource or role specifying general properties onlyright allows resource to create both labor and non-labor resources. This right isdependent on Resource - Navigate being granted.

    Allows resource to view and edit general information, contact information, financialinformation, skills and calendar for all resources. This right is dependent on ResouNavigate being granted.

    Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which resource has access.

  • 8/8/2019 Clarity v12 Security Design Chart

    19/117

    91_Clarity Support Administration - Application

    91_Clarity Support Administration - Authorization

    91_Clarity Support Company - Create

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support Company - Edit - All Allows resource to view and edit general and supplemental properties of all compa

    91_Clarity Support Company - Edit Financial - All

    91_Clarity Support Company - View - All Allows resource to view general and supplemental properties of all companies.

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support Allows access to Financial Management module in Application Administration.

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support Allows resource to approve credit memos.

    91_Clarity Support Allows resource to approve any WIP adjustment.

    91_Clarity Support Financial Process - Billing

    91_Clarity Support

    91_Clarity Support Allows resource to post WIP entries to the GL.

    91_Clarity Support

    91_Clarity Support Allows resource to enter transactions (vouchers).

    91_Clarity Support

    91_Clarity Support Ideas - Create Allows creation of ideas

    91_Clarity Support Ideas - Navigate Access to the ideas management pages

    91_Clarity Support Incidents - Access Allows resource to access the incident pages.

    91_Clarity Support Incidents - Administrate

    91_Clarity Support Incidents - Create

    91_Clarity Support Incidents - Create/Edit - All

    91_Clarity Support Incidents - Override Priority Allows resource to override the priority of the incident to which the resource has ac

    91_Clarity Support

    Allows resource access the OBS, Time, Data Administration and General Settingssections within within the administration tool. This right includes the AdministrationAccess right.

    Allows resource to access the authorization and authentication section within theadministration tool. This right includes the Administration - Access right.

    Allows resource to view and edit all companies as well as to create new companiesright does not allow the resource to view documents for the company unless speciaccess to the folders or documents have been granted.

    Company - DocumentManager - Administrate - All

    Allows resource to access all documents and forms attached to companies. This riallows resource to: create new form folders; create new document folders; add formfolders; attach document templates to forms; delete forms; create ne

    Company - DocumentManager - Read - All

    Allows resource to access all documents and forms attached to companies. Includability to view history, versions and processes for documents.

    Company - DocumentManager - Read / Write /Delete your own

    Allows resource to access all documents and forms attached to companies. Includability to create new form folders, create new document folders, add forms to foldeattach document templates to forms, delete forms owned by the resource, create ndocument folders, add documents, delete document added by the resource, copydocuments, and view history, versions and processes on documents.

    Allows resource to view and edit financial properties of all companies. This right isdependent on other rights providing view capability for Companies, such as theCompany - View - All right etc.

    Company - View Financial -All

    Allows resource to view financial properties of all companies. This right is dependeother rights providing view capability for Companies, such as the Company - View right etc.

    Financial Maintenance -Define Matrix

    Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.

    Financial Maintenance -Financial Management

    Financial Maintenance -Manage Matrix

    Allows resource to define Financial cost/rate matrices. This right allows resource tocreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows m

    columns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.

    Financial Process - ApproveBilling and Credit Memos

    Allows resource to approve or reject billing transactions that resource has billingapproval rights for. This rights also includes the ability to Print Batch Billing.

    Financial Process - ApproveCredit Memo

    Financial Process - ApproveWIP Adjustments

    Allows resource to create bills using demand billing, batch billing, advanced billingre-billing.

    Financial Process - CreditMemo

    Allows resource to create and print credit memos. This right is dependent on the RRun instance right. To allow printing of a credit memo, the resource need to be grathe report instance right called Report - Run for the Customer Invoice Report.

    Financial Process - GLPosting

    Financial Process - PrintInvoices

    Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.

    Financial Process -Transaction Entry

    Financial Process - Work inProcess

    Allows access to the WIP screens and allows resource to process WIP for alltransactions in the WIP table.

    Allows resource to access the incident administration pages, and administer thecategory-investment mapping, category-group mapping and priority setup.

    Allows resource to create new incidents and edit the incidents that the resource hacreated. This gives limited access to incident properties. This right includes IncidenAccess.

    Allows resource to create new incidents and edit all incidents on the incident pagesright includes Incidents - Access and Incidents - Select Category - All.

    Incidents - Select Category -All

    Allows resource to select all categories on the incident pages. This right includesIncidents - Access.

  • 8/8/2019 Clarity v12 Security Design Chart

    20/117

    91_Clarity Support Jobs - View Output - All

    91_Clarity Support Knowledge Store - Access

    91_Clarity Support

    91_Clari ty Support Knowledge Store - View All Allows resource to view all documents in the Knowledge Store.

    91_Clarity Support

    91_Clarity Support Management - Methodology

    91_Clarity Support Management - Programs

    91_Clarity Support Allow scheduling in the browser.

    91_Clarity Support Opportunity - Edit - All

    91_Clarity Support Allows approval of all other investments

    91_Clarity Support Other Investment - Create Allows creation of other investments

    91_Clarity Support Allows editing the access rights page of all Other Investments, includes delete

    91_Clarity Support Other Investment - Edit All Allows editing of all other investments, includes delete

    91_Clarity Support Other Investment - Navigate Access to the other investment management pages

    91_Clarity Support Other Investment - View All Allows viewing of all other investments

    91_Clarity Support Page Definition Viewer - All

    91_Clarity Support Page Viewer - All91_Clarity Support Partition - Administer Enables administration of the Partition Models

    91_Clarity Support Portfolio - Create Allows creation of portfolios

    91_Clari ty Support Portfol io - Edit Access All Allows edit ing the access rights page of all Portfolio, includes delete

    91_Clarity Support Portfolio - Edit All Allows editing of all portfolios, includes delete

    91_Clarity Support Portfolio - Navigate Access to the portfolio management pages

    91_Clarity Support Portfolio - View All Allows viewing of all portfolios

    91_Clarity Support Portlet Viewer - All Allows resource to view all portlets and add them to pages.

    91_Clarity Support Process - Cancel - All

    91_Clarity Support Process - Create Definit ion Allows resource to create new process definitions or copy existing process definiti

    91_Clarity Support Process - Delete - All

    91_Clari ty Support Process - Edit Definition - Al l Allows resource to edit al l process def ini tions.

    91_Clari ty Support Process - View Def inition - All Allows resource to view all process definit ions.

    91_Clarity Support Process Access Allows resource to access Process pages in the administration tool.

    91_Clari ty Support Process Engine Monitoring Enables navigation to the process engine monitoring and administration

    91_Clarity Support Process View Instance - All Allows resource to view all process instances.

    91_Clarity Support Product - Approve All Allows approval of all products

    91_Clarity Support Product - Create Allows creation of products

    91_Clarity Support Product - Edit Access All Allows editing the access rights page of all Products, includes delete

    91_Clarity Support Product - Edit All Allows editing of all products, includes delete

    91_Clarity Support Product - Navigate Access to the product management pages

    91_Clarity Support Product - View All Allows viewing of all products

    91_Clarity Support Project - Approve All Allows approval of all projects

    91_Clarity Support

    91_Clarity Support Project - Create

    91_Clarity Support

    91_Clarity Support Edit Assigned Tasks on any Project

    Allows resource to view the output of any job. This right is dependent on Jobs - Acbeing granted.

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Knowledge Store -Administrate

    Allows resource to administer folders and documents in the Knowledge Store thatresource has been given permission to.

    Management - CapacityPlanning

    Allows resource to use the Capacity Planner feature for resources and projects theresource has access to. This right is dependent on the resource having rights toresources and projects at either the instance level or OBS level.

    Allows resource to use Niku Author to create and save methods to the Niku 6 repoincluding any shipped methods. NOTE. Granting this right implies that a license to Niku Author module has been purchased.

    Allowed resource access to the Program Management features for programs andprojects the resource has access to. This right is dependent on the resource havinrights to programs and projects at either the instance level or OBS level.

    Management - Schedule InBrowser

    Allows resource to view and edit opportunity properties of any project to which theresource has view access. This right is dependent on the resource having either P

    View, Project View Management, Project - View Opportunity or Project Manager rigthe project.

    Other Investment - ApproveAll

    Other Investment - EditAccess All

    Allows resource to view the definition of all pages in the administration tool. This rigdependent on Administration - Access right being granted.

    Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration

    Access right.

    Allows resource to cancel a process instance from any of the process definitions insystem.

    Allows resource to delete a process instance from any of the process definitions insystem.

    Project - Attach RequisitionsEntry Resources - All

    Allows resource to attach resources to all requisition entries. This right includes theto navigate to the requisition pages, but does not include the right to create newrequisitions or entries.

    Allows resource to create a new project or program specifying general project propA resource granted this right will automatically become the collaboration manager project and will be able to create action items, discussion

    Project - Create/EditRequisitions - All

    Allows resource to create and edit all requisitions. This right includes the right to nato the requisition pages.

    Project - Edit Assigned Tasks- All

  • 8/8/2019 Clarity v12 Security Design Chart

    21/117

    91_Clarity Support

    91_Clarity Support Project - Edit Project Plan - All

    91_Clarity Support

    91_Clarity Support Project - Enable Financial

    91_Clarity Support Project - Enable Opportunity

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support Project - Modify Baseline - All

    91_Clarity Support Project - View Financial - All

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support Allows resource to view all requisitions, but not the individual requisition entries.

    91_Clarity Support Project - View Tasks - All

    91_Clarity Support Reports - Access

    91_Clarity Support Reports - Run - All

    91_Clarity Support Reports - View Output - All

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support Resource - Approve Ideas All Allows approval of ideas for all resources

    91_Clarity Support

    91_Clarity Support Resource - Create

    91_Clarity Support

    91_Clarity Support

    Project - Edit Management -All

    Allows resource to edit the general and management properties, staff and tasks foproject that has been enabled for management. This includes the ability to add subprojects to that project as well as to edit it in Microsoft Project and Open WorkbencThis right also allows the resource to create processes on any project and to edit tprocesses that he or she creates.

    Allows resource to add unplanned tasks to any project when completing his timeshhe is a team member on that project.

    Project - Edit RequisitionEntries - All

    Allows resource to create and edit requisition entries. This right includes the right tonavigate to the requisition pages.

    Allows resource to enable financials properties for project to which the resource haaccess. This right is dependent on the resource having either Project - View, ProjeView Management, Project - View Opportunity or Project Manager right for the proThe resource will also be able to enable financial properties for projects where theresource is a participant or collaboration manager.

    Allows resource to enable the opportunity properties for projects to which the resouhas view access. This right is dependent on the resource having either Project - ViProject View Management or Project Manager right for the project. The resource wbe able opportunity properties for projects where the resource is a participant orcollaboration manager.

    Project - Financial Planning -

    All

    Allows resource to view and edit the financial plan for all projects. This allows the

    resource to enter budgets and forecasts for all projects.Project - Financial Planning -Budget

    Allows resource to view and edit the financial budget plan for all projects. This allowresource to enter budgets for all projects.

    Project - Financial Planning -Forecast

    Allows resource to view and edit the financial forecast plan for all projects. This allothe resource to enter forecasts for all projects.

    Project - Financial PlanningApproval - All

    Allows resource to approve and submit the financial plan for all projects. This right allows resource to enter budgets and forecasts for all projects.

    Project - Financial PlanningApproval - All - Budget

    Allows resource to approve and submit the financial budget plan for all projects. Thright also allows resource to enter budgets for all projects.

    Project - Financial PlanningApproval - All - Forecast

    Allows resource to approve and submit the financial forecast plan for all projects. Tright also allows resource to enter forecasts for all projects.

    Allows resource to baseline all projects which has been enabled for Management. rights also allows resource to view the general project properties and processes.

    Allows resource to view the general and financial properties and processes on all

    projects. This right does not include the right to view the financial plan(budgets/forecasts).

    Project - View Management -All

    Allows resource to view the general and management properties and processes onprojects which has been enabled for management.

    Project - View Opportunity -All

    Allows resource to view all opportunities. The resource will be allowed to view themanagement, opportunity and process sections of the opportunity.

    Project - View RequisitionEntries - All

    Allows resource to view all requisition entries. This right includes the right to navigathe requisition pages.

    Project - View Requisitions -All

    Allows resource to view the tasks and work breakdown structure for all project to wthe resource has access.

    Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.

    Allows resource to run any report. Allows scheduling of any report, editing of the reproperties for any report and viewing the output of any report. This right is dependeReports - Access being granted.

    Allows resource to view the output of any report. This right is dependent on ReportAccess being granted.

    Reports and Jobs -Administrator Access

    Access resource to view report and job definitions. The right also allows resource tthe reports and jobs categories.

    Reports and Jobs - EditDefinition - All

    Allows resource to edit any report or job definition. This right is dependent on RepoJobs - Administer Access being granted.

    Resource - AuthorizationAccess Screens

    Allows resource access to Administrator pages for creating, editing and viewingresources. This right is dependent on Administration - Access being granted.

    Allows resource to create a new resource or role specifying general properties onlyright allows resource to create both labor and non-labor resources. This right isdependent on Resource - Navigate being granted.

    Resource - DocumentManager - Administer - All

    Allows resource to create, edit and view documents, folders and forms for resourcethe resource has been granted Resource - View for. This right is dependent on Re- Navigate being granted.

    Resource - DocumentManager - Read - All

    Allows resource view-only access to the documents, folders and forms for resourcethe resource has been granted Resource - View for. This right is dependent on Re- Navigate being granted.

    Allows resource to create, view and edit documents and forms for resources that th

  • 8/8/2019 Clarity v12 Security Design Chart

    22/117

    91_Clarity Support Resource - External Access

    91_Clarity Support Resource - Hard Book - All

    91_Clarity Support Resource - Navigate

    91_Clarity Support Resource - Soft Book - All

    91_Clarity Support Resource - Update Skills

    91_Clarity Support Resource - View - All

    91_Clarity Support Resource - View Book - All Allows resource to view bookings for all resources.

    91_Clarity Support

    91_Clarity Support Resource - View Ideas All Allows viewing of ideas for all resources

    91_Clarity Support Resource Change - Create

    91_Clarity Support Resource Change - Edit All

    91_Clarity Support Resource Change - View All

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support

    91_Clarity Support Allows resources to view all risks, issues, and change requests on a project instan

    91_Clarity Support Software Download - JRE Grants access to download the JRE from account settings page.

    91_Clarity Support

    91_Clarity Support Grants access to download Open Workbench from account settings page.

    91_Clarity Support Grants access to download the SVG Viewer from account settings page.

    91_Clari ty Support System Partition - Administer Enables administration of the System Parti tion91_Clarity Support Timesheets - Approve All Allows resource to approve all submitted timesheets in the system.

    91_Clarity Support Timesheets - Edit All Allows resource to edit all timesheets in the system.

    91_Clarity Support Timesheets - Navigate

    92_Clarity Admin and Dev Access to Add-In Management Administration Pages

    92_Clarity Admin and Dev Administration - Access

    92_Clari ty Admin and Dev Administration - Appl ication

    92_Clari ty Admin and Dev Administration - Authorization

    92_Clari ty Admin and Dev Applicat ion - Approve All Allows approval of all applications

    92_Clarity Admin and Dev Application - Create Allows creation of applications

    92_Clarity Admin and Dev Application - Edit Access All Allows editing the access rights page of all Applications, includes delete

    92_Clarity Admin and Dev Application - Edit All Allows editing of all applications, includes delete

    92_Clarity Admin and Dev Application - Navigate Access to the application management pages

    92_Clarity Admin and Dev Application - View All Allows viewing of all applications

    92_Clarity Admin and Dev Asset - Approve All Allows approval of all assets

    92_Clarity Admin and Dev Asset - Create Allows creation of assets

    Allows access to the Resource list, Resource Finder and Requisitions. Includes theability to view resource general information, contact information, financial informaticalendar and skills of resources to which the user has been granted Resource - Vie

    Allows resource to Soft or Hard book all resources to a projects that has been ena

    for management and that the resource has been granted Project - View or Project for.

    Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which resource has access.

    Allows resource to Soft book all resources to a projects that has been enabled formanagement and that the resource has been granted Project - Edit for.

    Allows resource to create, edit and view skills for resources that the resource has bgranted Resource - View right for. This right also allows the resource to view resougeneral information, contact information, financial information and calendar, but doallow resource to edit that information. This right is dependent on Resource - Navigbeing granted.

    Allows resource to view all resources and their information except the financial proof the resource. This right is dependent on Resource - Navigate being granted.

    Resource - View Financial -All

    Allows resource to view financial properties on all resources. This right is dependeResource - Navigate being granted.

    Allows resource to create Resource Change objects. This includes the page navigaright.

    Allows resource to edit all Resource Change objects. This includes the page navigright.

    Allows resource to view all Resource Change objects. This includes the page navigright.

    Resource Change Notes -Create

    Allows resource to create Resource Change Notes objects. This includes the pagenavigation right.

    Resource Change Notes -Edit All

    Allows resource to edit all Resource Change Notes objects. This includes the pagenavigation right.

    Resource Change Notes -

    View All

    Allows resource to view all Resource Change Notes objects. This includes the pag

    navigation right.Risk, Issue, Change Request- Delete - All

    Allows resources to delete all risks, issues, and change requests on projects for whthey are staffed.

    Risk, Issue, Change Request- Edit - All

    Allows resources to create and edit all risks, issues, and change requests on a proinstance.

    Risk, Issue, Change Request- View - All

    Software Download -Microsoft Project Interface

    Grants access to download the Clarity Microsoft Project Interface from account setpage.

    Software Download - OpenWorkbench

    Software Download - SVGViewer

    Allows resource to access the timesheets list page. The resource will only be able timesheets the resource has edit or approve timesheets rights over.

    Add-In Administration PagesAccess

    Allows resource access to the Administration Tool only. Does not give access to anparts of the Administration Tool.

    Allows resource access the OBS, Time, Data Administration and General Settingssections within within the administration tool. This right includes the AdministrationAccess right.

    Allows resource to access the authorization and authentication section within theadministration tool. This right includes the Administration - Access right.

  • 8/8/2019 Clarity v12 Security Design Chart

    23/117

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Company - Edit - All Allows resource to view and edit general and supplemental properties of all compa

    92_Clari ty Admin and Dev Company - Edit Financial - All

    92_Clarity Admin and Dev Company - View - All Allows resource to view general and supplemental properties of all companies.

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Allows access to Financial Management module in Application Administration.

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Allows resource to approve credit memos.

    92_Clarity Admin and Dev Allows resource to approve any WIP adjustment.

    92_Clari ty Admin and Dev Financial Process - Bil ling

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Allows resource to post WIP entries to the GL.

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Allows resource to enter transactions (vouchers).

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Ideas - Create Allows creation of ideas

    92_Clarity Admin and Dev Ideas - Navigate Access to the ideas management pages

    92_Clarity Admin and Dev Incidents - Access Allows resource to access the incident pages.

    92_Clarity Admin and Dev Incidents - Administrate

    92_Clarity Admin and Dev Incidents - Create

    92_Clari ty Admin and Dev Incidents - Create/Edit - All

    Company - DocumentManager - Administrate - All

    Allows resource to access all documents and forms attached to companies. This riallows resource to: create new form folders; create new document folders; add formfolders; attach document templates to forms; delete forms; create ne

    Company - DocumentManager - Read - All

    Allows resource to access all documents and forms attached to companies. Includability to view history, versions and processes for documents.

    Company - DocumentManager - Read / Write /Delete your own

    Allows resource to access all documents and forms attached to companies. Includability to create new form folders, create new document folders, add forms to foldeattach document templates to forms, delete forms owned by the resource, create ndocument folders, add documents, delete document added by the resource, copydocuments, and view history, versions and processes on documents.

    Allows resource to view and edit financial properties of all companies. This right isdependent on other rights providing view capability for Companies, such as theCompany - View - All right etc.

    Company - View Financial -All

    Allows resource to view financial properties of all companies. This right is dependeother rights providing view capability for Companies, such as the Company - View right etc.

    Financial Maintenance -Define Matrix

    Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.

    Financial Maintenance -Financial Management

    Financial Maintenance -Financial OrganizationalStructure

    Allows resource to define the Financial Organizational Structure and Financial FiscPeriods. This right allow resource to create, edit and view Entities, Locations,Departments, Resource Classes, Company Classes, Work in Process Classes, PrClasses, Transaction Classes, Currencies, Foreign Exchange Rates, GL AccountsResource Credits, Project Level Allocations, Task Level Allocations, Units of MeasCost Key Definitions, Vendors, Batch Cycle Definitions, Batch Cycle Assignments Batch Output. Resources can also Copy Departments to Locations. This right isdependent on Administration - Access being granted.

    Financial Maintenance - GL

    Integration

    Allows resource to distribute transactions from Niku 6 to the GL chart of accounts.

    allows resource to post these transactions to the GL.

    Financial Maintenance -Manage Matrix

    Allows resource to define Financial cost/rate matrices. This right allows resource tocreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows mcolumns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.

    Financial Process - ApproveBilling and Credit Memos

    Allows resource to approve or reject billing transactions that resource has billingapproval rights for. This rights also includes the ability to Print Batch Billing.

    Financial Process - ApproveCredit Memo

    Financial Process - ApproveWIP Adjustments

    Allows resource to create bills using demand billing, batch billing, advanced billingre-billing.

    Financial Process - CreditMemo

    Allows resource to create and print credit memos. This right is dependent on the RRun instance right. To allow printing of a credit memo, the resource need to be grathe report instance right called Report - Run for the Customer Invoice Report.

    Financial Process - GLPosting

    Financial Process - PrintInvoices

    Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.

    Financial Process -Transaction Entry

    Financial Process - Work inProcess

    Allows access to the WIP screens and allows resource to process WIP for alltransactions in the WIP table.

    Allows resource to access the incident administration pages, and administer thecategory-investment mapping, category-group mapping and priority setup.

    Allows resource to create new incidents and edit the incidents that the resource hacreated. This gives limited access to incident properties. This right includes IncidenAccess.

    Allows resource to create new incidents and edit all incidents on the incident pagesright includes Incidents - Access and Incidents - Select Category - All.

  • 8/8/2019 Clarity v12 Security Design Chart

    24/117

    92_Clarity Admin and Dev Jobs - Run - All

    92_Clarity Admin and Dev Jobs - View Output - All

    92_Clarity Admin and Dev Knowledge Store - Access

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Knowledge Store - View All Allows resource to view all documents in the Knowledge Store.

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Management - Methodology

    92_Clarity Admin and Dev Management - Programs

    92_Clarity Admin and Dev Allow scheduling in the browser.92_Clarity Admin and Dev Menu Definition Viewer - All Allows resource to view the definition of a menu in the administration tool.

    92_Clari ty Admin and Dev Offline Timesheet - Download

    92_Clarity Admin and Dev Opportunity - Edit - All

    92_Clarity Admin and Dev Allows approval of all other investments

    92_Clarity Admin and Dev Other Investment - Create Allows creation of other investments

    92_Clarity Admin and Dev Allows editing the access rights page of all Other Investments, includes delete

    92_Clarity Admin and Dev Other Investment - Edit All Allows editing of all other investments, includes delete

    92_Clarity Admin and Dev Other Investment - Navigate Access to the other investment management pages

    92_Clarity Admin and Dev Other Investment - View All Allows viewing of all other investments

    92_Clari ty Admin and Dev Page Definition Viewer - Al l

    92_Clarity Admin and Dev Page Viewer - All

    92_Clarity Admin and Dev Partition - Administer Enables administration of the Partition Models

    92_Clarity Admin and Dev Portfolio - Create Allows creation of portfolios

    92_Clarity Admin and Dev Portfolio - Edit Access All Allows editing the access rights page of all Portfolio, includes delete

    92_Clarity Admin and Dev Portfolio - Edit All Allows editing of all portfolios, includes delete

    92_Clarity Admin and Dev Portfolio - Navigate Access to the portfolio management pages

    92_Clarity Admin and Dev Portfolio - View All Allows viewing of all portfolios

    92_Clarity Admin and Dev Portlet Viewer - All Allows resource to view all portlets and add them to pages.

    92_Clarity Admin and Dev Process - Cancel - All

    92_Clarity Admin and Dev Process - Create Definition Allows resource to create new process definitions or copy existing process definiti

    92_Clarity Admin and Dev Process - Delete - All

    92_Clarity Admin and Dev Process - Edit Definition - All Allows resource to edit all process definitions.

    92_Clarity Admin and Dev Process - Manage - All

    92_Clarity Admin and Dev Process - Start - All

    92_Clarity Admin and Dev Process - View Definition - All Allows resource to view all process definitions.

    92_Clarity Admin and Dev Process Access Allows resource to access Process pages in the administration tool.

    92_Clarity Admin and Dev Process Engine Monitoring Enables navigation to the process engine monitoring and administration

    92_Clarity Admin and Dev Process View Instance - All Allows resource to view all process instances.

    92_Clarity Admin and Dev Product - Approve All Allows approval of all products

    92_Clarity Admin and Dev Product - Create Allows creation of products

    92_Clarity Admin and Dev Product - Edit Access All Allows editing the access rights page of all Products, includes delete

    92_Clarity Admin and Dev Product - Edit All Allows editing of all products, includes delete

    92_Clarity Admin and Dev Product - Navigate Access to the product management pages

    92_Clarity Admin and Dev Product - View All Allows viewing of all products

    92_Clarity Admin and Dev Project - Approve All Allows approval of all projects

    Allows resource to run any job. Al lows scheduling of any job, editing of the job propfor any job and viewing the output of any job. This right is dependent on Jobs - Accbeing granted.

    Allows resource to view the output of any job. This right is dependent on Jobs - Acbeing granted.

    Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.

    Knowledge Store -Administrate

    Allows resource to administer folders and documents in the Knowledge Store thatresource has been given permission to.

    Management - CapacityPlanning

    Allows resource to use the Capacity Planner feature for resources and projects theresource has access to. This right is dependent on the resource having rights toresources and projects at either the instance level or OBS level.

    Allows resource to use Niku Author to create and save methods to the Niku 6 repoincluding any shipped methods. NOTE. Granting this right implies that a license to Niku Author module has been purchased.

    Allowed resource access to the Program Management features for programs andprojects the resource has access to. This right is dependent on the resource havinrights to programs and projects at either the instance level or OBS level.

    Management - Schedule In

    Browser

    Allows resource access to download offline timesheet template from the AccountSettings: Software Downloads page.

    Allows resource to view and edit opportunity properties of any project to which theresource has view access. This right is dependent on the resource having either PView, Project View Management, Project - View Opportunity or Project Manager rigthe project.

    Other Investment - ApproveAll

    Other Investment - EditAccess All

    Allows resource to view the definition of all pages in the administration tool. This rigdependent on Administration - Access right being granted.

    Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration Access right.

    Allows resource to cancel a process instance from any of the process definitions in

    system.

    Allows resource to delete a process instance from any of the process definitions insystem.

    Allows resource to manage process instance for any of the process definitions in thsystem.

    Allows resource to start a new process instance from any of the process definitionssystem.

  • 8/8/2019 Clarity v12 Security Design Chart

    25/117

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Project - Delete All Allows resource to delete any project or program.

    92_Clarity Admin and Dev Edit Assigned Tasks on any Project

    92_Clari ty Admin and Dev Project - Edit Financial - All

    92_Clarity Admin and Dev

    92_Clari ty Admin and Dev Project - Edit Project Plan - Al l

    92_Clarity Admin and Dev

    92_Clari ty Admin and Dev Project - Enable Financial

    92_Clari ty Admin and Dev Project - Enable Opportunity

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clari ty Admin and Dev Project - Modify Baseline - Al l

    92_Clarity Admin and Dev Allows resource to edit all Project objects using secured subpage Billing (ID: 5004

    92_Clarity Admin and Dev

    92_Clari ty Admin and Dev Project - View Financial - Al l

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Allows resource to view all requisitions, but not the individual requisition entries.

    92_Clarity Admin and Dev Project - View Tasks - All

    92_Clarity Admin and Dev Reports - Access

    92_Clarity Admin and Dev Reports - Run - All

    92_Clarity Admin and Dev Reports - View Output - All

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Resource - Approve Ideas All Allows approval of ideas for all resources

    92_Clarity Admin and Dev

    Project - Create/EditRequisitions - All

    Allows resource to create and edit all requisitions. This right includes the right to nato the requisition pages.

    Project - Edit Assigned Tasks- All

    Allows resource to view and edit general properties, processes and financial informon all projects. This right will also allows the resource to enable financial fields on aproject.

    Project - Edit Management -All

    Allows resource to edit the general and management properties, staff and tasks foproject that has been enabled for management. This includes the ability to add subprojects to that project as well as to edit it in Microsoft Project and Open WorkbencThis right also allows the resource to create processes on any project and to edit tprocesses that he or she creates.

    Allows resource to add unplanned tasks to any project when completing his timeshhe is a team member on that project.

    Project - Edit RequisitionEntries - All

    Allows resource to create and edit requisition entries. This right includes the right tonavigate to the requisition pages.

    Allows resource to enable financials properties for project to which the resource haaccess. This right is dependent on the resource having either Project - View, ProjeView Management, Project - View Opportunity or Project Manager right for the pro

    The resource will also be able to enable financial properties for projects where theresource is a participant or collaboration manager.

    Allows resource to enable the opportunity properties for projects to which the resouhas view access. This right is dependent on the resource having either Project - ViProject View Management or Project Manager right for the project. The resource wbe able opportunity properties for projects where the resource is a participant orcollaboration manager.

    Project - Financial Planning -All

    Allows resource to view and edit the financial plan for all projects. This allows theresource to enter budgets and forecasts for all projects.

    Project - Financial Planning -Budget

    Allows resource to view and edit the financial budget plan for all projects. This allowresource to enter budgets for all projects.

    Project - Financial Planning -Forecast

    Allows resource to view and edit the financial forecast plan for all projects. This allothe resource to enter forecasts for all projects.

    Project - Financial PlanningApproval - All

    Allows resource to approve and submit the financial plan for all projects. This right allows resource to enter budgets and forecasts for all projects.

    Project - Financial PlanningApproval - All - Budget

    Allows resource to approve and submit the financial budget plan for all projects. Thright also allows resource to enter budgets for all projects.

    Project - Financial PlanningApproval - All - Forecast

    Allows resource to approve and submit the financial forecast plan for all projects. Tright also allows resource to enter forecasts for all projects.

    Allows resource to baseline all projects which has been enabled for Management. rights also allows resource to view the general project properties and processes.

    Project - Subpage Billing (ID:5004019) - Edit All

    Project - Subpage Billing (ID:5004019) - View All

    Allows resource to navigate to all Project objects using secured subpage Billing (ID5004019).

    Allows resource to view the general and financial properties and processes on allprojects. This right does not include the right to view the financial plan(budgets/forecasts).

    Project - View Management -

    All

    Allows resource to view the general and management properties and processes on

    projects which has been enabled for management.

    Project - View Opportunity -All

    Allows resource to view all opportunities. The resource will be allowed to view themanagement, opportunity and process sections of the opportunity.

    Project - View RequisitionEntries - All

    Allows resource to view all requisition entries. This right includes the right to navigathe requisition pages.

    Project - View Requisitions -All

    Allows resource to view the tasks and work breakdown structure for all project to wthe resource has access.

    Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.

    Allows resource to run any report. Allows scheduling of any report, editing of the reproperties for any report and viewing the output of any report. This right is dependeReports - Access being granted.

    Allows resource to view the output of any report. This right is dependent on ReportAccess being granted.

    Reports and Jobs -Administrator Access

    Access resource to view report and job definitions. The right also allows resource tthe reports and jobs categories.

    Resource - AuthorizationAccess Screens

    Allows resource access to Administrator pages for creating, editing and viewingresources. This right is dependent on Administration - Access being granted.

  • 8/8/2019 Clarity v12 Security Design Chart

    26/117

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Resource - Edit - All

    92_Clarity Admin and Dev Resource - Edit Ideas All Allows editing of ideas for all resources, includes delete

    92_Clarity Admin and Dev Resource - External Access

    92_Clarity Admin and Dev Resource - Hard Book - All

    92_Clarity Admin and Dev Resource - Navigate

    92_Clarity Admin and Dev Resource - Soft Book - All

    92_Clarity Admin and Dev Resource - Update Skills

    92_Clarity Admin and Dev Resource - View - All

    92_Clarity Admin and Dev Resource - View Book - All Allows resource to view bookings for all resources.

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Resource - View Ideas All Allows viewing of ideas for all resources

    92_Clarity Admin and Dev Resource Change - Create

    92_Clarity Admin and Dev Resource Change - Edit All

    92_Clarity Admin and Dev Resource Change - View All

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Allows resources to view all risks, issues, and change requests on a project instan

    92_Clarity Admin and Dev Software Download - JRE Grants access to download the JRE from account settings page.

    92_Clarity Admin and Dev

    92_Clarity Admin and Dev Grants access to download Open Workbench from account settings page.

    92_Clarity Admin and Dev Grants access to download the SVG Viewer from account settings page.

    92_Clarity Admin and Dev System Partition - Administer Enables administration of the System Partition

    92_Clarity Admin and Dev Timesheets - Approve All Allows resource to approve all submitted timesheets in the system.

    92_Clarity Admin and Dev Timesheets - Edit All Allows resource to edit all timesheets in the system.

    92_Clarity Admin and Dev Timesheets - Navigate

    92_Clarity Admin and Dev Custom Objects Editor Allows resource to edit the definition of a Custom Object in the administration tool.

    92_Clarity Admin and Dev Menu Definition Editor - All Allows resource to edit and view the definitions of all menus in the administration t

    92_Clari ty Admin and Dev Object - Create Definition Enables creation of a custom object

    92_Clarity Admin and Dev Object Administration Customizable Object Administration

    92_Clari ty Admin and Dev Page Definition Editor - All

    Resource - DocumentManager - Read - All

    Allows resource view-only access to the documents, folders and forms for resourcethe resource has been granted Resource - View for. This right is dependent on Re- Navigate being granted.

    Resource - Document

    Manager - Read / Write /Delete your own

    Allows resource to create, view and edit documents and forms for resources that thresource has been granted Resource - View for. It also allows the resource to dele

    documents, folder or forms that the resource has created. This right is dependent oResource - Navigate being granted.

    Allows resource to view and edit general information, contact information, financialinformation, skills and calendar for all resources. This right is dependent on ResouNavigate being granted.

    Allows access to the Resource list, Resource Finder and Requisitions. Includes theability to view resource general information, contact information, financial informaticalendar and skills of resources to which the user has been granted Resource - Vie

    Allows resource to Soft or Hard book all resources to a projects that has been enafor management and that the resource has been granted Project - View or Project for.

    Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which

    resource has access.Allows resource to Soft book all resources to a projects that has been enabled formanagement and that the resource has been granted Project - Edit for.

    Allows resource to create, edit and view skills for resources that the resource has bgranted Resource - View right for. This right also allows the resource to view resougeneral information, contact information, financial information and calendar, but doallow resource to edit that information. This right is dependent on Resource - Navigbeing granted.

    Allows resource to view all resources and their information except the financial proof the resource. This right is dependent on Resource - Navigate being granted.

    Resource - View Financial -All

    Allows resource to view financial properties on all resources. This right is dependeResource - Navigate being granted.

    Allows resource to create Resource Change objects. This includes the page navigaright.

    Allows resource to edit all Resource Change objects. This includes the page navigright.

    Allows resource to view all Resource Change objects. This includes the page navigright.

    Resource Change