Set Managed Plan Security

Learn how to configure access to managed plans.

Overview

Security for managed plans is permission-based. Permissions specify what data, actions, and content users can access in the solution. For more information, see Permission Management.

To set up user access to managed plans, configure the following components within a permission:

  • Content packages: Ensure your managed plan's metrics and plan model are included in the appropriate content packages. These packages provide granular control over the content that is available to users in different parts of the solution experience. For more information, see Content Packages.
  • Data security: Define security for individual segments and plan items within a managed plan. Plan item security controls visibility of specific plan items, such as Base Pay. Segmentation security controls visibility of the rows in the plan based on the plan’s hierarchy members, such as Location.

By configuring these components, you ensure that when a managed plan is shared, users only see the data authorized by their permissions. Any plan values outside of their granted access will appear blank.

Set managed plan security

  1. In a project, on the navigation bar, click Security > Permissions.
  2. Do one of the following:
    • Create a new permission and add the managed plan and content package. For more information, see Create a Permission.
    • Add the managed plan to an existing permission. For more information, see Add Access to Items.

      Result: The user can now view the plan at the level of access you granted them once the plan is published.

Example: Create a permission that allows a user to see all the plan data for some plan items

Let’s say you've just created a new managed plan called My Managed Plan using the Headcount Forecasting plan model. Now, you want to configure security for the plan by adding a new permission that grants a user access to all of the plan data, but hides certain plan items. In this example, we don't want the user to have access to any plans items related to cost and FTE.

  1. Create a new permission by clicking Add Permission.
  2. Give the permission a name and description. In this example, let's name the permission My Managed Plan - All Data Some Items.
  3. Click Create.
  4. In the Data Security tab, click Add access.
  5. In the Select the data dialog, click the Managed Plans drop-down and select My Managed Plan.
  6. Click Finish.
  7. Click in the Population Access column for the managed plan.

  8. Select Access to all > Apply. This gives users with this permission access to the entire population.
  9. Click in the Data access column for the managed plan.

  10. In the Configure data access for room set the level of data access for each plan item in the managed plan. By default, access to all plan items will be turned off. In this example, we don't want the user to have access to any plans items related to cost and FTE. So, only turn on data access for plan items related to headcount.
  11. In the Capabilities tab, select the capabilities for the permission. Capabilities determine the actions users with this permission can perform in the solution. For more information, see Capabilities List.
  12. In the Content packages tab, select the content packages for the permission that include the managed plan's metrics and plan model.
  13. Click Save > Confirm > Close.
  14. Now, you can assign this permission to a user. For more information, see Assign Permissions to a User.
    1. On the navigation bar, click Security > Users.
    2. Select a user in the Users list.
    3. Click Assign in the Permissions area.
    4. Select the My Managed Plan - All Data Some Items permission.
    5. Click Assign.