Set Managed Plan Security

Learn how to configure access to managed plans.

Overview

Security for managed plans is permission-based. You determine user access through permissions and define security for each segment and plan item. Plan item security determines which plan items are visible to the user, such as Base Pay. Segmentation security determines which rows of the plan are visible based on access to the plan’s hierarchy members, such as Location. You must configure security in order for users to view your plan. When you share a plan with users, they will only see the plan data that you have granted them access to in their permission. Plan values they do not have access to will be blank.

Prerequisites

You must first Create a Managed Plan before you can configure plan security.

Set managed plan security

  1. In a project, on the navigation bar, click Security > Permissions.
  2. Do one of the following:
    1. Create a new permission and add the managed plan. For more information, see Create a Permission.
    2. Add the managed plan to an existing permission. For more information, see Add Access to Items.

      Result: The user can now view the plan at the level of access you granted them once the plan is published.

Example: Create a permission that allows a user to see all the plan data for some plan items

Let’s say you've just created a new managed plan called My Managed Plan using the Headcount Forecasting plan model. Now, you want to configure security for the plan by adding a new permission that grants a user access to all of the plan data, but hides certain plan items. In this example, we don't want the user to have access to any plans items related to cost and FTE.

  1. Create a new permission by clicking Add Permission.
  2. Give the permission a name and description. In this example, let's name the permission My Managed Plan - All Data Some Items.
  3. Click Create.
  4. In the Data Security tab, click Add access.
  5. In the Select the data dialog, click the Managed Plans drop-down and select My Managed Plan.
  6. Click Finish.
  7. Click in the Population Access column for the managed plan.

  8. Select Access to all > Apply. This gives users with this permission access to the entire population.
  9. Click in the Data access column for the managed plan.

  10. In the Configure data access for room set the level of data access for each plan item in the managed plan. By default, access to all plan items will be turned off. In this example, we don't want the user to have access to any plans items related to cost and FTE. So, only turn on data access for plan items related to headcount.
  11. Click Save > Confirm > Close.
  12. Now, you can assign this permission to a user. For more information, see Assign Permissions to a User.
    1. On the navigation bar, click Security > Users.
    2. Select a user in the Users list.
    3. Click Assign in the Permissions area.
    4. Select the My Managed Plan - All Data Some Items permission.
    5. Click Assign.