8/8/2019 Clarity v12 Security Design Chart
1/117
Clarity Security Group
1 of 117 12/06/2010 47437720.xls
ID Security Group Name
0_Subcontractors Time Entry 0_Subcontractors Time Entry AInfor Employee 1_ Infor Employee A
Infor Project Manager 2_ PSO Project Manager A
Infor Resource Manager 3_ PSO Resource Manager A4_ Executive A
5_ Project Creator A
60_AMER PSO Ops A
61_APAC PSO Ops A
62_EMEA PSO Ops A
63_COE PSO Ops A
7_ Finance A
80_AMER PA A
81_APAC PA A
82_EMEA PA A
90_ Help Desk A
91_Clarity Support A92_ Clarity Admin and Dev A
93_ Job Monitors A
951_KnowStore: Development A
ProductionStatus
8/8/2019 Clarity v12 Security Design Chart
2/117
Clarity Security Group
2 of 117 12/06/2010
Sec
Active
Security Group Name
A 0_Subcontractors Time Entry
A 1_ Infor Employee
A 2_ PSO Project Manager
A 3_ PSO Resource Manager
A 4_ Executive
A 5_ Project Creator
A 62_EMEA PSO Ops
A 60_AMER PSO Ops
A 61_APAC PSO Ops
A 7_ Finance
A 80_AMER PA
A 81_APAC PA
A 82_EMEA PA
A 90_ Help Desk
A 91_Clarity Support
A 92_ Clarity Admin and Dev
Su
bcontractor(no
access)
8/8/2019 Clarity v12 Security Design Chart
3/117
Name Description Groups Individual OBS
No groups
none
Subcontractor Consultant 0_Subcontractors Time Entry
none
Consultant 1_Infor Employee
none
Project Manager
Resource Manager
Executive
PSO Administrator
none
Accounting
none
Billing
none
IT Help Desk
none
Clarity Support
none
Clarity Dev & Admin
none
Regional Add-onGroups
Subcontractor (noaccess)
For subcontractors whose time is tracked inClarity, but who do not access the Clarity
application themselves. Select this profile ifsomeone else will input time on behalf of theconsultant.
For subcontractors who will access Clarity toenter their own time. This profile providesminimal access to timesheets and view-onlyaccess to the projects that the subcon isworking on.
For the majority of Infor employees who willuse Clarity for time tracking. This includes theability to see the basic information of projectsthey are assigned to, as well as access to theKnowledge Store and some portlets andreports.
For a consultant who acts as a projectmanager on some projects. This profileprovides access to some additional reports andportlets, as well as the ability to book roles toprojects, view resources, and use projectmanagement features.
1_Infor Employee2_ PSO Project Manager
Project - View
Project - View D
For a PSO manager who manages bothprojects and resources. This profile providesadditional access to resource data and theability to book resources to projects. Alsoincludes the ability to edit the baseline of aproject.
1_Infor Employee2_ PSO Project Manager3_ PSO Resource Manager
Resource - HardProject - EditProject - View D
Access to run all reports and portlets in Clarity.Also includes access to portfolios and risks,
issues, and change requests
1_Infor Employee2_ PSO Project Manager3_ PSO Resource Manager
4_ Executive
Project - EditProject - View DResource - Hard
For Operations staff or admins - includes theability to create projects and edit rate and costmatrices.
1_Infor Employee2_ PSO Project Manager3_ PSO Resource Manager4_ Executive5_ Project Creator
60_AMER PSO Ops61_APAC PSO Ops62_EMEA PSO Ops63_COE PSO Ops
For Finance staff who will not be performingbilling functions in Clarity. Provides ability torun all reports and portlets and view dataglobally.
1_Infor Employee2_ PSO Project Manager7_ Finance
For Finance staff who will be performing billingfunctions inside of Clarity.
1_Infor Employee2_ PSO Project Manager7_ Finance
80_AMER PA81_APAC PA82_EMEA PA
Global Helpdesk staff who will reset passwords
and other tier 1 support.
1_Infor Employee
90_Help Desk
IT Tier 2 support staff, excludes some rightsreserved for Global Admin and Development.
1_Infor Employee91_Clarity Support93_Job Monitors
All administrative access rights includingaccess to Studio and XOG.
1_Infor Employee92_Clarity Dev and Admin93_Job Monitors
8/8/2019 Clarity v12 Security Design Chart
4/117
Group Access Right
0_Subcontractors Time Entry Page - View
0_Subcontractors Time Entry Portlet - View
1_Infor Employee Page - View
1_Infor Employee Page - View
1_Infor Employee Page - View
1_Infor Employee Page - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Portlet - View
1_Infor Employee Report - Run
1_Infor Employee Report - Run1_Infor Employee Report - Run
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
2_PSO Project Manager Page - View
8/8/2019 Clarity v12 Security Design Chart
5/117
2_PSO Project Manager Page - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
2_PSO Project Manager Portlet - View
8/8/2019 Clarity v12 Security Design Chart
6/117
2_PSO Project Manager Portlet - View
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
8/8/2019 Clarity v12 Security Design Chart
7/117
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
2_PSO Project Manager Report - Run
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Page - View
3_PSO Resource Manager Portlet - View
3_PSO Resource Manager Portlet - View
3_PSO Resource Manager Portlet - View3_PSO Resource Manager Portlet - View
3_PSO Resource Manager Portlet - View
3_PSO Resource Manager Portlet - View
3_PSO Resource Manager Portlet - View
3_PSO Resource Manager Report - Run
7_Finance Job - Run
90_Help Desk Page - View
90_Help Desk Page - View
8/8/2019 Clarity v12 Security Design Chart
8/117
90_Help Desk Page - View
90_Help Desk Page - View
90_Help Desk Page - View
90_Help Desk Page - View
90_Help Desk Page - View
90_Help Desk Portlet - View
90_Help Desk Portlet - View
90_Help Desk Portlet - View
90_Help Desk Portlet - View90_Help Desk Portlet - View
8/8/2019 Clarity v12 Security Design Chart
9/117
Instance ID
XM Expense Management Frame InforFrameExpense
XM Expense Entry Form i2_xm_expense
Clarity Rollout ClarityRollout
Clarity Support Clarity_Support
XM Expense Management Frame InforFrameExpense
XM Support XMSupport
Issues By Priority cop.issuesByPriorityLinkable
My Reports reporting.myReportsNotifications personal.notificationsNugget
P001 - Clarity News and Information P001_Clarity_News_and_Information
P037 - Revenue by Resource p037_revenue_by_resource
P226 - CL XM Cycle CLXMCycle
P501 Support ITHelpDesk
P502 XM Cycle XMCycleCL
P503 - Rollout Schedule Rollout
Site Links personal.siteLinks
Timesheets to Approve projmgr.timesheetAdmin
XM Expense Entry i2_xm_expense
Resource Assignments
Resource CalendarTimesheet Detail
Billing SYSTEM5000144
Forecasting Leakage
Invoice Approval page_invoiceapproval
P260A Timesheet Detail P260ATIMESHEETDETAIL
Project Dashboard copProjectManagerDashboard
Project POC PP250bc
Project POC ProjectPOCTab
Project Setup ProjectCrossRef
PSO PM Dashboard PSOPMDashboard
PSO Project Manager InforPSOPM
PSO Project Manager InforPSOPMFRAME
Rate Matrix billingapproval
8/8/2019 Clarity v12 Security Design Chart
10/117
Transactions Transactions
Events calendar.homeEvents
Gantt Gantt
Late Tasks and Milestones cop.lateTasksMilestonesLinkable
P000 - Under Development underdevelopmentP034 Leakage leakage_portlet
P035 Backlog Backlog
P038 - Dormant Projects dormant_projects
P039 Verify Project Rates verify_project_rates
P040 - PM Time Status P040 - PM Time Status New
P041 Verify Rate Matrix verify_rate_matrix
P042 - Outstanding Invoices p042_outstanding_invoices
P043 - Clarity Bookings p043-Clarity Bookings
P049-Backlog P049_Backlog
P053-Booking Status projmgr.bookingStatus
P085 Billable Hours billable_hours
P154 Invoice by Status MJ01-invoiceByStatusP200 - Unapproved Time p200 - Unapproved Time
P201 - Transaction Table p201_transaction_dump
P201b - Transaction Values p201b_transaction_values
P201c - Transaction AP Values p201c_transaction_ap_values
P202 - Billings Table p202_billings_dump
P203 - Projected Revenue p203_projected_revenue
P206 - Invalid Invoices p206_invalid_invoices
P209a Invoice Headers p209a_invoice_headers
P209b Invoice Details p209b_invoice_details
P211 - Billing Pre-Approvals p211_pre_approved_bills
P211b - Pre-approved Billings p211b_pre_approved_billings
P211w - Pre-Approved WIP p211w_pre_approved_wipP213 - Billing Approved Bills p213_approved_bills
P215 - Invoice Lines p215_invoice_lines
P219 - Eligible Billings p219_eligible_billings
P220 - Unapproved/Open for Time Entry Projects ote_unapproved_projects
P221 - Posted Time against Unapproved Projects unapproved_project_time
P228 - PM Schedule Dashboard cop.projectManagerScheduleDashboard
P232 - Invalid Transactions p232_invalid_transactions
P240 -Rejected Invoice Status p240RejectedInvoiceStatus
P245- Billing Access Audit p245_bililng_access_audit
P250a - Lookup Project Percentage of Completion P250a
P250b - Project Percentage of Completion P250b
P250c - Task Percentage of Completion P250cP251 - Project Listing p251 - Project Listing
P255 - Subcontractor Margin p255 - Subcontractor Margin
P255 - Subcontractor Reconciliation p255 - Subcontractor Reconcillation
P260 Timesheet P260TimesheetReproduction
P260A Timesheet Detail P260A TIMESHEET DETAIL
Schedule Performance - 30 Day Outlook cop.schedulePerformance
Schedule Performance Details cop.schedulePerformanceLinkable
Timesheets to Approve projmgr.timesheetAdmin
8/8/2019 Clarity v12 Security Design Chart
11/117
Weekly Detail projmgr.weeklyDetail
Company Invoice
Key Tasks and Milestone Status
Missing Time Report
P044 - Customer Project Transactions Report
P270 - Billing Details Report
Pre-Billing Report V2
Program Schedule Review Report
Project Analysis and Profitability Report
Project Listing
Project Snapshot
Project Stoplight
Project Transactions Inquiry
Resource Utilization - Forecasted
Resource Utilization - Forecasted Detail
Resource Utilization - History
8/8/2019 Clarity v12 Security Design Chart
12/117
Skills Listing
Transactions Inquiry
Unfilled Roles
Allocations projmgr.allocations
Billable Hours BillableHours
Capacity projmgr.capacity
Customer Lookup SYSTEM5000145
HCM HCM
Project Setup SYSTEM5000152
PSO Resource Manager InforPSORMFRAME
PSO Resource Manager InforPSORM
Resource Planning projmgr.resourcePlanning
Unapproved Time SYSTEM5000146
Workloads projmgr.workloads
P047 Resource ID hcm_personal_information
P204-Employee Classification employee_classification
P225 - Resource Validation p225_resource_validationP227 - Infor Company List InforCompanyList
Resource Workloads projmgr.resourceWorkloads
Role Capacity projmgr.roleCapacity
Unfilled Allocations projmgr.unfilledAllocations
Resource Bench
P230 - WIP Accruals
Administration inforframeadminFRAME
HCM ID hcmid
8/8/2019 Clarity v12 Security Design Chart
13/117
Interface Mgt interfaceMgt
Invoice Approval page_invoiceapproval
Notifications notifications
Resource Classification employeeclassification
Security Settings securitysettings
P000 - Under Development underdevelopment
P046 Supressed Notifications suppressed_notifications
P047 Resource ID hcm_personal_information
P099 - Current Sessions infor_current_sessionsP100 - Session Audit infor_session_audit
8/8/2019 Clarity v12 Security Design Chart
14/117
Group Access Right Description
4_Executive Project - View Documents
60_AMER PSO Ops Project - View Documents
61_APAC PSO Ops Project - View Documents
62_EMEA PSO Ops Project - View Documents
63_COE PSO Ops Project - View Documents
7_Infor Finance Project - View Documents
Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.
Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.
Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.
Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.
Allows resource to view documents or folders even if resource is not a projectparticipant, as long as the documents or folders are marked open to non-participanThis right includes the Project - View Base right.
8/8/2019 Clarity v12 Security Design Chart
15/117
Instance or OBS level
Geography:Infor Unit and descendants
Organization:Infor Unit and descendants
Organization:Centre of Excellence Unit and
descendantsOrganization:IBU Unit and descendantsOrganization:Americas Unit and descendants
Organization:Centre of Excellence Unit anddescendantsOrganization:APAC Unit and descendantsOrganization:IBU Unit and descendants
Organization:Centre of Excellence Unit anddescendantsOrganization:EMEA Unit and descendantsOrganization:IBU Unit and descendants
Organization:Centre of Excellence Unit anddescendants
8/8/2019 Clarity v12 Security Design Chart
16/117
Group Access Right Description
0_Subcontractors Time Entry Knowledge Store - Access
0_Subcontractors Time Entry Timesheets - Navigate
1_Infor Employee Knowledge Store - Access
1_Infor Employee Project - View Tasks - All
1_Infor Employee Reports - Access
1_Infor Employee Software Download - JRE Grants access to download the JRE from account settings page.
1_Infor Employee Grants access to download Open Workbench from account settings page.
1_Infor Employee Grants access to download the SVG Viewer from account settings page.
1_Infor Employee Timesheets - Navigate
2_PSO Project Manager Management - Programs
2_PSO Project Manager Allow scheduling in the browser.
2_PSO Project Manager Project - Benefit Plan - Edit All Allows resource to edit all the Project benefit plans.
2_PSO Project Manager Project - Budget Plan - Edit All Allows resource to edit all the Project budget plans.
2_PSO Project Manager Project - Cost Plan - Edit All Allows resource to edit all the project cost plans.
2_PSO Project Manager
2_PSO Project Manager Allows resource to submit all the project financial plans for approval.
2_PSO Project Manager Project - Modify Baseline - All
2_PSO Project Manager Resource - Navigate
2_PSO Project Manager Resource - View - All
2_PSO Project Manager
3_PSO Resource Manager Portfol io - Create Allows user to create Portfol ios. Includes the Portfol io - Navigate right.
3_PSO Resource Manager Portfolio - Navigate Access to the portfolio management pages
3_PSO Resource Manager
3_PSO Resource Manager
3_PSO Resource Manager Resource - External Access
3_PSO Resource Manager Resource - Update Skills
3_PSO Resource Manager Resource Change - View All
3_PSO Resource Manager
4_Executive Page Viewer - All
4_Executive Portfolio - View All Allows viewing of all portfolios
4_Executive Portlet Viewer - All Allows resource to view all portlets and add them to pages.
4_Executive Reports - Access
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Allows resource to access the timesheets list page. The resource will only be able timesheets the resource has edit or approve timesheets rights over.
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Allows resource to view the tasks and work breakdown structure for all project to wthe resource has access.
Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.
Software Download - OpenWorkbench
Software Download - SVGViewer
Allows resource to access the timesheets list page. The resource will only be able timesheets the resource has edit or approve timesheets rights over.
Allowed resource access to the Program Management features for programs and
projects the resource has access to. This right is dependent on the resource havinrights to programs and projects at either the instance level or OBS level.
Management - Schedule InBrowser
Project - Create/EditRequisitions - All
Allows user to create and edit all requisitions. This right includes the right to navigathe requisition pages.
Project - Financial Plan -Submit All for Approval
Allows resource to baseline all projects which has been enabled for Management.
rights also allows resource to view the general project properties and processes.Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which resource has access.
Allows resource to view all resources and their information except the financial proof the resource. This right is dependent on Resource - Navigate being granted.
Resource - View Financial -All
Allows user to view financial properties on all resources. This right is dependent onResource - Navigate being granted.
Project - Attach RequisitionsEntry Resources - All
Allows user to attach resources to all requisition entries. This right includes the righnavigate to the requisition pages, but does not include the right to create newrequisitions or entries.
Project - Create/Edit
Requisitions - All
Allows user to create and edit all requisitions. This right includes the right to naviga
the requisition pages.
Allows access to the Resource list, Resource Finder and Requisitions. Includes theability to view resource general information, contact information, financial informaticalendar and skills of resources to which the user has been granted Resource - Vie
Allows resource to create, edit and view skills for resources that the resource has granted Resource - View right for. This right also allows the resource to view resougeneral information, contact information, financial information and calendar, but doallow resource to edit that information. This right is dependent on Resource - Navigbeing granted.
Allows resource to view all Resource Change objects. This includes the page navigright.
Resource Change Notes -View All
Allows resource to view all Resource Change Notes objects. This includes the pagnavigation right.
Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration Access right.
Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.
8/8/2019 Clarity v12 Security Design Chart
17/117
5_Project Creator Administration - Access
5_Project Creator Company - View - All Allows resource to view general and supplemental properties of all companies.
5_Project Creator
5_Project Creator
5_Project Creator
5_Project Creator Knowledge Store - Access
5_Project Creator Project - Create
5_Project Creator Project - Enable Financial
5_Project Creator Project - Billing Access - All
60_AMER PSO Ops Allows access to Financial Management module in Application Administration.
60_AMER PSO Ops Allows user to enter transactions (vouchers).
60_AMER PSO Ops Knowledge Store - Access
60_AMER PSO Ops Process View Instance - All Allows resource to view all process instances.
60_AMER PSO Ops Administration - Access
60_AMER PSO Ops
61_APAC PSO Ops Allows user to enter transactions (vouchers).
61_APAC PSO Ops Knowledge Store - Access
61_APAC PSO Ops Process View Instance - All Allows resource to view all process instances.
61_APAC PSO Ops Administration - Access
61_APAC PSO Ops
62_EMEA PSO Ops
62_EMEA PSO Ops Allows resource to approve credit memos.
62_EMEA PSO Ops Allows resource to approve any WIP adjustment.
62_EMEA PSO Ops Financial Process - Billing
62_EMEA PSO Ops
62_EMEA PSO Ops
62_EMEA PSO Ops Allows resource to enter transactions (vouchers).
62_EMEA PSO Ops
62_EMEA PSO Ops Knowledge Store - Access
62_EMEA PSO Ops Process View Instance - All Allows resource to view all process instances.
Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.
Company - View Financial -All
Allows resource to view financial properties of all companies. This right is dependeother rights providing view capability for Companies, such as the Company - View right etc.
Financial Maintenance -Define Matrix
Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.
Financial Maintenance -Manage Matrix
Allows resource to define Financial cost/rate matrices. This right allows resource tcreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows mcolumns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Allows resource to create a new project or program specifying general project propA resource granted this right will automatically become the collaboration manager project and will be able to create action items, discussion
Allows resource to enable financials properties for project to which the resource ha
access. This right is dependent on the resource having either Project - View, ProjeView Management, Project - View Opportunity or Project Manager right for the proThe resource will also be able to enable financial properties for projects where theresource is a participant or collaboration manager.
Financial Maintenance -Financial Management
Financial Process -Transaction Entry
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.
Financial Maintenance -Manage Matrix
Allows user to define Financial cost/rate matrices. This right allows user to create, and view Cost/Rate, Administrative or Tax matrices. The right allows matrix columnbe configured and entering of rows to create matrix rules. This right also includes tcapability to copy, delete, test and lock/unlock matrices. This right is dependent onAdministration - Navigate being granted.
Financial Process -Transaction Entry
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.
Financial Maintenance -
Manage Matrix
Allows user to define Financial cost/rate matrices. This right allows user to create, and view Cost/Rate, Administrative or Tax matrices. The right allows matrix columnbe configured and entering of rows to create matrix rules. This right also includes tcapability to copy, delete, test and lock/unlock matrices. This right is dependent on
Administration - Navigate being granted.
Financial Process - ApproveBilling and Credit Memos
Allows resource to approve or reject billing transactions that resource has billingapproval rights for. This rights also includes the ability to Print Batch Billing.
Financial Process - ApproveCredit Memo
Financial Process - ApproveWIP Adjustments
Allows resource to create bills using demand billing, batch billing, advanced billingre-billing.
Financial Process - CreditMemo
Allows resource to create and print credit memos. This right is dependent on the RRun instance right. To allow printing of a credit memo, the resource need to be grathe report instance right called Report - Run for the Customer Invoice Report.
Financial Process - PrintInvoices
Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.
Financial Process -Transaction Entry
Financial Process - Work inProcess
Allows access to the WIP screens and allows resource to process WIP for alltransactions in the WIP table.
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
8/8/2019 Clarity v12 Security Design Chart
18/117
63_COE PSO Ops Knowledge Store - Access
63_COE PSO Ops Process View Instance - All Allows resource to view all process instances.
7_Infor Finance Administration - Access
7_Infor Finance Company - Edit Financial - All
7_Infor Finance Company - View - All Allows resource to view general and supplemental properties of all companies.
7_Infor Finance
7_Infor Finance
7_Infor Finance Knowledge Store - Access
7_Infor Finance
7_Infor Finance Financial Process - Billing
7_Infor Finance
7_Infor Finance Jobs - Access
7_Infor Finance Page Viewer - All
7_Infor Finance Portlet Viewer - All Allows resource to view all portlets and add them to pages.
7_Infor Finance
7_Infor Finance
7_Infor Finance Reports - Access
7_Infor Finance Reports - Run - All
7_Infor Finance Reports - View Output - All
7_Infor Finance
7_Infor Finance
7_Infor Finance Allows resource to navigate to WIP Accrual Groupings object pages.
7_Infor Finance
90_Help Desk Administration - Access
90_Help Desk Administration - Authorization
90_Help Desk Knowledge Store - Access
90_Help Desk
90_Help Desk
90_Help Desk Resource - Create
90_Help Desk Resource - Edit - All
90_Help Desk Resource - Navigate
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Allows user to navigate to Administration Tool. User will need additional rights to pindividual Administration actions.
Allows resource to view and edit financial properties of all companies. This right isdependent on other rights providing view capability for Companies, such as theCompany - View - All right etc.
Financial Maintenance -Define Matrix
Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.
Financial Maintenance -Manage Matrix
Allows resource to define Financial cost/rate matrices. This right allows resource tcreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows mcolumns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Financial Process - Approve
Billing and Credit Memos
Allows resource to approve or reject billing transactions that resource has billing
approval rights for. This rights also includes the ability to Print Batch Billing.Allows user to create bills using demand billing, batch billing, advanced billing, andbilling.
Financial Process - PrintInvoices
Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.
Allows user access to the jobs pages. This right is dependent on either the Jobs - All right or the user being granted instance level rights such as Job - Run, Job - VieOutput or Job - Edit Properties.
Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration Access right.
Project - Financial Planning -
All
Allows resource to view and edit the financial plan for all projects. This allows the
resource to enter budgets and forecasts for all projects.Project - Financial PlanningApproval - All
Allows resource to approve and submit the financial plan for all projects. This right allows resource to enter budgets and forecasts for all projects.
Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.
Allows user to run any report. Allows scheduling of any report, editing of the reportproperties for any report and viewing the output of any report. This right is dependeReports - Access being granted.
Allows resource to view the output of any report. This right is dependent on ReportAccess being granted.
WIP Accrual Groupings -Create
Allows resource to create WIP Accrual Groupings objects. This includes the pagenavigation right.
WIP Accrual Groupings - EditAll
Allows resource to edit all WIP Accrual Groupings objects. This includes the pagenavigation right.
WIP Accrual Groupings -Navigate
WIP Accrual Groupings - ViewAll
Allows resource to view all WIP Accrual Groupings objects. This includes the pagenavigation right.
Allows resource access to the Administration Tool only. Does not give access to anparts of the Administration Tool.
Allows resource to access the authorization and authentication section within theadministration tool. This right includes the Administration - Access right.
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Administration - PartitionModels
Allows user to manage Partition Models. Does not include the Administration - Navright.
Resource - AuthorizationAccess Screens
Allows resource access to Administrator pages for creating, editing and viewingresources. This right is dependent on Administration - Access being granted.
Allows resource to create a new resource or role specifying general properties onlyright allows resource to create both labor and non-labor resources. This right isdependent on Resource - Navigate being granted.
Allows resource to view and edit general information, contact information, financialinformation, skills and calendar for all resources. This right is dependent on ResouNavigate being granted.
Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which resource has access.
8/8/2019 Clarity v12 Security Design Chart
19/117
91_Clarity Support Administration - Application
91_Clarity Support Administration - Authorization
91_Clarity Support Company - Create
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support Company - Edit - All Allows resource to view and edit general and supplemental properties of all compa
91_Clarity Support Company - Edit Financial - All
91_Clarity Support Company - View - All Allows resource to view general and supplemental properties of all companies.
91_Clarity Support
91_Clarity Support
91_Clarity Support Allows access to Financial Management module in Application Administration.
91_Clarity Support
91_Clarity Support
91_Clarity Support Allows resource to approve credit memos.
91_Clarity Support Allows resource to approve any WIP adjustment.
91_Clarity Support Financial Process - Billing
91_Clarity Support
91_Clarity Support Allows resource to post WIP entries to the GL.
91_Clarity Support
91_Clarity Support Allows resource to enter transactions (vouchers).
91_Clarity Support
91_Clarity Support Ideas - Create Allows creation of ideas
91_Clarity Support Ideas - Navigate Access to the ideas management pages
91_Clarity Support Incidents - Access Allows resource to access the incident pages.
91_Clarity Support Incidents - Administrate
91_Clarity Support Incidents - Create
91_Clarity Support Incidents - Create/Edit - All
91_Clarity Support Incidents - Override Priority Allows resource to override the priority of the incident to which the resource has ac
91_Clarity Support
Allows resource access the OBS, Time, Data Administration and General Settingssections within within the administration tool. This right includes the AdministrationAccess right.
Allows resource to access the authorization and authentication section within theadministration tool. This right includes the Administration - Access right.
Allows resource to view and edit all companies as well as to create new companiesright does not allow the resource to view documents for the company unless speciaccess to the folders or documents have been granted.
Company - DocumentManager - Administrate - All
Allows resource to access all documents and forms attached to companies. This riallows resource to: create new form folders; create new document folders; add formfolders; attach document templates to forms; delete forms; create ne
Company - DocumentManager - Read - All
Allows resource to access all documents and forms attached to companies. Includability to view history, versions and processes for documents.
Company - DocumentManager - Read / Write /Delete your own
Allows resource to access all documents and forms attached to companies. Includability to create new form folders, create new document folders, add forms to foldeattach document templates to forms, delete forms owned by the resource, create ndocument folders, add documents, delete document added by the resource, copydocuments, and view history, versions and processes on documents.
Allows resource to view and edit financial properties of all companies. This right isdependent on other rights providing view capability for Companies, such as theCompany - View - All right etc.
Company - View Financial -All
Allows resource to view financial properties of all companies. This right is dependeother rights providing view capability for Companies, such as the Company - View right etc.
Financial Maintenance -Define Matrix
Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.
Financial Maintenance -Financial Management
Financial Maintenance -Manage Matrix
Allows resource to define Financial cost/rate matrices. This right allows resource tocreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows m
columns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.
Financial Process - ApproveBilling and Credit Memos
Allows resource to approve or reject billing transactions that resource has billingapproval rights for. This rights also includes the ability to Print Batch Billing.
Financial Process - ApproveCredit Memo
Financial Process - ApproveWIP Adjustments
Allows resource to create bills using demand billing, batch billing, advanced billingre-billing.
Financial Process - CreditMemo
Allows resource to create and print credit memos. This right is dependent on the RRun instance right. To allow printing of a credit memo, the resource need to be grathe report instance right called Report - Run for the Customer Invoice Report.
Financial Process - GLPosting
Financial Process - PrintInvoices
Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.
Financial Process -Transaction Entry
Financial Process - Work inProcess
Allows access to the WIP screens and allows resource to process WIP for alltransactions in the WIP table.
Allows resource to access the incident administration pages, and administer thecategory-investment mapping, category-group mapping and priority setup.
Allows resource to create new incidents and edit the incidents that the resource hacreated. This gives limited access to incident properties. This right includes IncidenAccess.
Allows resource to create new incidents and edit all incidents on the incident pagesright includes Incidents - Access and Incidents - Select Category - All.
Incidents - Select Category -All
Allows resource to select all categories on the incident pages. This right includesIncidents - Access.
8/8/2019 Clarity v12 Security Design Chart
20/117
91_Clarity Support Jobs - View Output - All
91_Clarity Support Knowledge Store - Access
91_Clarity Support
91_Clari ty Support Knowledge Store - View All Allows resource to view all documents in the Knowledge Store.
91_Clarity Support
91_Clarity Support Management - Methodology
91_Clarity Support Management - Programs
91_Clarity Support Allow scheduling in the browser.
91_Clarity Support Opportunity - Edit - All
91_Clarity Support Allows approval of all other investments
91_Clarity Support Other Investment - Create Allows creation of other investments
91_Clarity Support Allows editing the access rights page of all Other Investments, includes delete
91_Clarity Support Other Investment - Edit All Allows editing of all other investments, includes delete
91_Clarity Support Other Investment - Navigate Access to the other investment management pages
91_Clarity Support Other Investment - View All Allows viewing of all other investments
91_Clarity Support Page Definition Viewer - All
91_Clarity Support Page Viewer - All91_Clarity Support Partition - Administer Enables administration of the Partition Models
91_Clarity Support Portfolio - Create Allows creation of portfolios
91_Clari ty Support Portfol io - Edit Access All Allows edit ing the access rights page of all Portfolio, includes delete
91_Clarity Support Portfolio - Edit All Allows editing of all portfolios, includes delete
91_Clarity Support Portfolio - Navigate Access to the portfolio management pages
91_Clarity Support Portfolio - View All Allows viewing of all portfolios
91_Clarity Support Portlet Viewer - All Allows resource to view all portlets and add them to pages.
91_Clarity Support Process - Cancel - All
91_Clarity Support Process - Create Definit ion Allows resource to create new process definitions or copy existing process definiti
91_Clarity Support Process - Delete - All
91_Clari ty Support Process - Edit Definition - Al l Allows resource to edit al l process def ini tions.
91_Clari ty Support Process - View Def inition - All Allows resource to view all process definit ions.
91_Clarity Support Process Access Allows resource to access Process pages in the administration tool.
91_Clari ty Support Process Engine Monitoring Enables navigation to the process engine monitoring and administration
91_Clarity Support Process View Instance - All Allows resource to view all process instances.
91_Clarity Support Product - Approve All Allows approval of all products
91_Clarity Support Product - Create Allows creation of products
91_Clarity Support Product - Edit Access All Allows editing the access rights page of all Products, includes delete
91_Clarity Support Product - Edit All Allows editing of all products, includes delete
91_Clarity Support Product - Navigate Access to the product management pages
91_Clarity Support Product - View All Allows viewing of all products
91_Clarity Support Project - Approve All Allows approval of all projects
91_Clarity Support
91_Clarity Support Project - Create
91_Clarity Support
91_Clarity Support Edit Assigned Tasks on any Project
Allows resource to view the output of any job. This right is dependent on Jobs - Acbeing granted.
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Knowledge Store -Administrate
Allows resource to administer folders and documents in the Knowledge Store thatresource has been given permission to.
Management - CapacityPlanning
Allows resource to use the Capacity Planner feature for resources and projects theresource has access to. This right is dependent on the resource having rights toresources and projects at either the instance level or OBS level.
Allows resource to use Niku Author to create and save methods to the Niku 6 repoincluding any shipped methods. NOTE. Granting this right implies that a license to Niku Author module has been purchased.
Allowed resource access to the Program Management features for programs andprojects the resource has access to. This right is dependent on the resource havinrights to programs and projects at either the instance level or OBS level.
Management - Schedule InBrowser
Allows resource to view and edit opportunity properties of any project to which theresource has view access. This right is dependent on the resource having either P
View, Project View Management, Project - View Opportunity or Project Manager rigthe project.
Other Investment - ApproveAll
Other Investment - EditAccess All
Allows resource to view the definition of all pages in the administration tool. This rigdependent on Administration - Access right being granted.
Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration
Access right.
Allows resource to cancel a process instance from any of the process definitions insystem.
Allows resource to delete a process instance from any of the process definitions insystem.
Project - Attach RequisitionsEntry Resources - All
Allows resource to attach resources to all requisition entries. This right includes theto navigate to the requisition pages, but does not include the right to create newrequisitions or entries.
Allows resource to create a new project or program specifying general project propA resource granted this right will automatically become the collaboration manager project and will be able to create action items, discussion
Project - Create/EditRequisitions - All
Allows resource to create and edit all requisitions. This right includes the right to nato the requisition pages.
Project - Edit Assigned Tasks- All
8/8/2019 Clarity v12 Security Design Chart
21/117
91_Clarity Support
91_Clarity Support Project - Edit Project Plan - All
91_Clarity Support
91_Clarity Support Project - Enable Financial
91_Clarity Support Project - Enable Opportunity
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support Project - Modify Baseline - All
91_Clarity Support Project - View Financial - All
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support Allows resource to view all requisitions, but not the individual requisition entries.
91_Clarity Support Project - View Tasks - All
91_Clarity Support Reports - Access
91_Clarity Support Reports - Run - All
91_Clarity Support Reports - View Output - All
91_Clarity Support
91_Clarity Support
91_Clarity Support Resource - Approve Ideas All Allows approval of ideas for all resources
91_Clarity Support
91_Clarity Support Resource - Create
91_Clarity Support
91_Clarity Support
Project - Edit Management -All
Allows resource to edit the general and management properties, staff and tasks foproject that has been enabled for management. This includes the ability to add subprojects to that project as well as to edit it in Microsoft Project and Open WorkbencThis right also allows the resource to create processes on any project and to edit tprocesses that he or she creates.
Allows resource to add unplanned tasks to any project when completing his timeshhe is a team member on that project.
Project - Edit RequisitionEntries - All
Allows resource to create and edit requisition entries. This right includes the right tonavigate to the requisition pages.
Allows resource to enable financials properties for project to which the resource haaccess. This right is dependent on the resource having either Project - View, ProjeView Management, Project - View Opportunity or Project Manager right for the proThe resource will also be able to enable financial properties for projects where theresource is a participant or collaboration manager.
Allows resource to enable the opportunity properties for projects to which the resouhas view access. This right is dependent on the resource having either Project - ViProject View Management or Project Manager right for the project. The resource wbe able opportunity properties for projects where the resource is a participant orcollaboration manager.
Project - Financial Planning -
All
Allows resource to view and edit the financial plan for all projects. This allows the
resource to enter budgets and forecasts for all projects.Project - Financial Planning -Budget
Allows resource to view and edit the financial budget plan for all projects. This allowresource to enter budgets for all projects.
Project - Financial Planning -Forecast
Allows resource to view and edit the financial forecast plan for all projects. This allothe resource to enter forecasts for all projects.
Project - Financial PlanningApproval - All
Allows resource to approve and submit the financial plan for all projects. This right allows resource to enter budgets and forecasts for all projects.
Project - Financial PlanningApproval - All - Budget
Allows resource to approve and submit the financial budget plan for all projects. Thright also allows resource to enter budgets for all projects.
Project - Financial PlanningApproval - All - Forecast
Allows resource to approve and submit the financial forecast plan for all projects. Tright also allows resource to enter forecasts for all projects.
Allows resource to baseline all projects which has been enabled for Management. rights also allows resource to view the general project properties and processes.
Allows resource to view the general and financial properties and processes on all
projects. This right does not include the right to view the financial plan(budgets/forecasts).
Project - View Management -All
Allows resource to view the general and management properties and processes onprojects which has been enabled for management.
Project - View Opportunity -All
Allows resource to view all opportunities. The resource will be allowed to view themanagement, opportunity and process sections of the opportunity.
Project - View RequisitionEntries - All
Allows resource to view all requisition entries. This right includes the right to navigathe requisition pages.
Project - View Requisitions -All
Allows resource to view the tasks and work breakdown structure for all project to wthe resource has access.
Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.
Allows resource to run any report. Allows scheduling of any report, editing of the reproperties for any report and viewing the output of any report. This right is dependeReports - Access being granted.
Allows resource to view the output of any report. This right is dependent on ReportAccess being granted.
Reports and Jobs -Administrator Access
Access resource to view report and job definitions. The right also allows resource tthe reports and jobs categories.
Reports and Jobs - EditDefinition - All
Allows resource to edit any report or job definition. This right is dependent on RepoJobs - Administer Access being granted.
Resource - AuthorizationAccess Screens
Allows resource access to Administrator pages for creating, editing and viewingresources. This right is dependent on Administration - Access being granted.
Allows resource to create a new resource or role specifying general properties onlyright allows resource to create both labor and non-labor resources. This right isdependent on Resource - Navigate being granted.
Resource - DocumentManager - Administer - All
Allows resource to create, edit and view documents, folders and forms for resourcethe resource has been granted Resource - View for. This right is dependent on Re- Navigate being granted.
Resource - DocumentManager - Read - All
Allows resource view-only access to the documents, folders and forms for resourcethe resource has been granted Resource - View for. This right is dependent on Re- Navigate being granted.
Allows resource to create, view and edit documents and forms for resources that th
8/8/2019 Clarity v12 Security Design Chart
22/117
91_Clarity Support Resource - External Access
91_Clarity Support Resource - Hard Book - All
91_Clarity Support Resource - Navigate
91_Clarity Support Resource - Soft Book - All
91_Clarity Support Resource - Update Skills
91_Clarity Support Resource - View - All
91_Clarity Support Resource - View Book - All Allows resource to view bookings for all resources.
91_Clarity Support
91_Clarity Support Resource - View Ideas All Allows viewing of ideas for all resources
91_Clarity Support Resource Change - Create
91_Clarity Support Resource Change - Edit All
91_Clarity Support Resource Change - View All
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support
91_Clarity Support Allows resources to view all risks, issues, and change requests on a project instan
91_Clarity Support Software Download - JRE Grants access to download the JRE from account settings page.
91_Clarity Support
91_Clarity Support Grants access to download Open Workbench from account settings page.
91_Clarity Support Grants access to download the SVG Viewer from account settings page.
91_Clari ty Support System Partition - Administer Enables administration of the System Parti tion91_Clarity Support Timesheets - Approve All Allows resource to approve all submitted timesheets in the system.
91_Clarity Support Timesheets - Edit All Allows resource to edit all timesheets in the system.
91_Clarity Support Timesheets - Navigate
92_Clarity Admin and Dev Access to Add-In Management Administration Pages
92_Clarity Admin and Dev Administration - Access
92_Clari ty Admin and Dev Administration - Appl ication
92_Clari ty Admin and Dev Administration - Authorization
92_Clari ty Admin and Dev Applicat ion - Approve All Allows approval of all applications
92_Clarity Admin and Dev Application - Create Allows creation of applications
92_Clarity Admin and Dev Application - Edit Access All Allows editing the access rights page of all Applications, includes delete
92_Clarity Admin and Dev Application - Edit All Allows editing of all applications, includes delete
92_Clarity Admin and Dev Application - Navigate Access to the application management pages
92_Clarity Admin and Dev Application - View All Allows viewing of all applications
92_Clarity Admin and Dev Asset - Approve All Allows approval of all assets
92_Clarity Admin and Dev Asset - Create Allows creation of assets
Allows access to the Resource list, Resource Finder and Requisitions. Includes theability to view resource general information, contact information, financial informaticalendar and skills of resources to which the user has been granted Resource - Vie
Allows resource to Soft or Hard book all resources to a projects that has been ena
for management and that the resource has been granted Project - View or Project for.
Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which resource has access.
Allows resource to Soft book all resources to a projects that has been enabled formanagement and that the resource has been granted Project - Edit for.
Allows resource to create, edit and view skills for resources that the resource has bgranted Resource - View right for. This right also allows the resource to view resougeneral information, contact information, financial information and calendar, but doallow resource to edit that information. This right is dependent on Resource - Navigbeing granted.
Allows resource to view all resources and their information except the financial proof the resource. This right is dependent on Resource - Navigate being granted.
Resource - View Financial -All
Allows resource to view financial properties on all resources. This right is dependeResource - Navigate being granted.
Allows resource to create Resource Change objects. This includes the page navigaright.
Allows resource to edit all Resource Change objects. This includes the page navigright.
Allows resource to view all Resource Change objects. This includes the page navigright.
Resource Change Notes -Create
Allows resource to create Resource Change Notes objects. This includes the pagenavigation right.
Resource Change Notes -Edit All
Allows resource to edit all Resource Change Notes objects. This includes the pagenavigation right.
Resource Change Notes -
View All
Allows resource to view all Resource Change Notes objects. This includes the pag
navigation right.Risk, Issue, Change Request- Delete - All
Allows resources to delete all risks, issues, and change requests on projects for whthey are staffed.
Risk, Issue, Change Request- Edit - All
Allows resources to create and edit all risks, issues, and change requests on a proinstance.
Risk, Issue, Change Request- View - All
Software Download -Microsoft Project Interface
Grants access to download the Clarity Microsoft Project Interface from account setpage.
Software Download - OpenWorkbench
Software Download - SVGViewer
Allows resource to access the timesheets list page. The resource will only be able timesheets the resource has edit or approve timesheets rights over.
Add-In Administration PagesAccess
Allows resource access to the Administration Tool only. Does not give access to anparts of the Administration Tool.
Allows resource access the OBS, Time, Data Administration and General Settingssections within within the administration tool. This right includes the AdministrationAccess right.
Allows resource to access the authorization and authentication section within theadministration tool. This right includes the Administration - Access right.
8/8/2019 Clarity v12 Security Design Chart
23/117
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev Company - Edit - All Allows resource to view and edit general and supplemental properties of all compa
92_Clari ty Admin and Dev Company - Edit Financial - All
92_Clarity Admin and Dev Company - View - All Allows resource to view general and supplemental properties of all companies.
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev Allows access to Financial Management module in Application Administration.
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev Allows resource to approve credit memos.
92_Clarity Admin and Dev Allows resource to approve any WIP adjustment.
92_Clari ty Admin and Dev Financial Process - Bil ling
92_Clarity Admin and Dev
92_Clarity Admin and Dev Allows resource to post WIP entries to the GL.
92_Clarity Admin and Dev
92_Clarity Admin and Dev Allows resource to enter transactions (vouchers).
92_Clarity Admin and Dev
92_Clarity Admin and Dev Ideas - Create Allows creation of ideas
92_Clarity Admin and Dev Ideas - Navigate Access to the ideas management pages
92_Clarity Admin and Dev Incidents - Access Allows resource to access the incident pages.
92_Clarity Admin and Dev Incidents - Administrate
92_Clarity Admin and Dev Incidents - Create
92_Clari ty Admin and Dev Incidents - Create/Edit - All
Company - DocumentManager - Administrate - All
Allows resource to access all documents and forms attached to companies. This riallows resource to: create new form folders; create new document folders; add formfolders; attach document templates to forms; delete forms; create ne
Company - DocumentManager - Read - All
Allows resource to access all documents and forms attached to companies. Includability to view history, versions and processes for documents.
Company - DocumentManager - Read / Write /Delete your own
Allows resource to access all documents and forms attached to companies. Includability to create new form folders, create new document folders, add forms to foldeattach document templates to forms, delete forms owned by the resource, create ndocument folders, add documents, delete document added by the resource, copydocuments, and view history, versions and processes on documents.
Allows resource to view and edit financial properties of all companies. This right isdependent on other rights providing view capability for Companies, such as theCompany - View - All right etc.
Company - View Financial -All
Allows resource to view financial properties of all companies. This right is dependeother rights providing view capability for Companies, such as the Company - View right etc.
Financial Maintenance -Define Matrix
Allows resource to define matrix. This right allows resource to create, edit and viewPlus Codes, Administrative Method Codes, Tax Authority Codes and Tax Methodsright is dependent on Administration - Access right being granted.
Financial Maintenance -Financial Management
Financial Maintenance -Financial OrganizationalStructure
Allows resource to define the Financial Organizational Structure and Financial FiscPeriods. This right allow resource to create, edit and view Entities, Locations,Departments, Resource Classes, Company Classes, Work in Process Classes, PrClasses, Transaction Classes, Currencies, Foreign Exchange Rates, GL AccountsResource Credits, Project Level Allocations, Task Level Allocations, Units of MeasCost Key Definitions, Vendors, Batch Cycle Definitions, Batch Cycle Assignments Batch Output. Resources can also Copy Departments to Locations. This right isdependent on Administration - Access being granted.
Financial Maintenance - GL
Integration
Allows resource to distribute transactions from Niku 6 to the GL chart of accounts.
allows resource to post these transactions to the GL.
Financial Maintenance -Manage Matrix
Allows resource to define Financial cost/rate matrices. This right allows resource tocreate, edit and view Cost/Rate, Administrative or Tax matrices. The right allows mcolumns to be configured and entering of rows to create matrix rules. This right alsincludes the capability to copy, delete, test and lock/unlock matrices. This right isdependent on Administration - Access being granted.
Financial Process - ApproveBilling and Credit Memos
Allows resource to approve or reject billing transactions that resource has billingapproval rights for. This rights also includes the ability to Print Batch Billing.
Financial Process - ApproveCredit Memo
Financial Process - ApproveWIP Adjustments
Allows resource to create bills using demand billing, batch billing, advanced billingre-billing.
Financial Process - CreditMemo
Allows resource to create and print credit memos. This right is dependent on the RRun instance right. To allow printing of a credit memo, the resource need to be grathe report instance right called Report - Run for the Customer Invoice Report.
Financial Process - GLPosting
Financial Process - PrintInvoices
Allows resource to print any invoice. This right is dependent on the Report - Runinstance right. To allow printing of a credit memo, the resource need to be grantedreport instance right called Report - Run for the Customer Invoice Report.
Financial Process -Transaction Entry
Financial Process - Work inProcess
Allows access to the WIP screens and allows resource to process WIP for alltransactions in the WIP table.
Allows resource to access the incident administration pages, and administer thecategory-investment mapping, category-group mapping and priority setup.
Allows resource to create new incidents and edit the incidents that the resource hacreated. This gives limited access to incident properties. This right includes IncidenAccess.
Allows resource to create new incidents and edit all incidents on the incident pagesright includes Incidents - Access and Incidents - Select Category - All.
8/8/2019 Clarity v12 Security Design Chart
24/117
92_Clarity Admin and Dev Jobs - Run - All
92_Clarity Admin and Dev Jobs - View Output - All
92_Clarity Admin and Dev Knowledge Store - Access
92_Clarity Admin and Dev
92_Clarity Admin and Dev Knowledge Store - View All Allows resource to view all documents in the Knowledge Store.
92_Clarity Admin and Dev
92_Clarity Admin and Dev Management - Methodology
92_Clarity Admin and Dev Management - Programs
92_Clarity Admin and Dev Allow scheduling in the browser.92_Clarity Admin and Dev Menu Definition Viewer - All Allows resource to view the definition of a menu in the administration tool.
92_Clari ty Admin and Dev Offline Timesheet - Download
92_Clarity Admin and Dev Opportunity - Edit - All
92_Clarity Admin and Dev Allows approval of all other investments
92_Clarity Admin and Dev Other Investment - Create Allows creation of other investments
92_Clarity Admin and Dev Allows editing the access rights page of all Other Investments, includes delete
92_Clarity Admin and Dev Other Investment - Edit All Allows editing of all other investments, includes delete
92_Clarity Admin and Dev Other Investment - Navigate Access to the other investment management pages
92_Clarity Admin and Dev Other Investment - View All Allows viewing of all other investments
92_Clari ty Admin and Dev Page Definition Viewer - Al l
92_Clarity Admin and Dev Page Viewer - All
92_Clarity Admin and Dev Partition - Administer Enables administration of the Partition Models
92_Clarity Admin and Dev Portfolio - Create Allows creation of portfolios
92_Clarity Admin and Dev Portfolio - Edit Access All Allows editing the access rights page of all Portfolio, includes delete
92_Clarity Admin and Dev Portfolio - Edit All Allows editing of all portfolios, includes delete
92_Clarity Admin and Dev Portfolio - Navigate Access to the portfolio management pages
92_Clarity Admin and Dev Portfolio - View All Allows viewing of all portfolios
92_Clarity Admin and Dev Portlet Viewer - All Allows resource to view all portlets and add them to pages.
92_Clarity Admin and Dev Process - Cancel - All
92_Clarity Admin and Dev Process - Create Definition Allows resource to create new process definitions or copy existing process definiti
92_Clarity Admin and Dev Process - Delete - All
92_Clarity Admin and Dev Process - Edit Definition - All Allows resource to edit all process definitions.
92_Clarity Admin and Dev Process - Manage - All
92_Clarity Admin and Dev Process - Start - All
92_Clarity Admin and Dev Process - View Definition - All Allows resource to view all process definitions.
92_Clarity Admin and Dev Process Access Allows resource to access Process pages in the administration tool.
92_Clarity Admin and Dev Process Engine Monitoring Enables navigation to the process engine monitoring and administration
92_Clarity Admin and Dev Process View Instance - All Allows resource to view all process instances.
92_Clarity Admin and Dev Product - Approve All Allows approval of all products
92_Clarity Admin and Dev Product - Create Allows creation of products
92_Clarity Admin and Dev Product - Edit Access All Allows editing the access rights page of all Products, includes delete
92_Clarity Admin and Dev Product - Edit All Allows editing of all products, includes delete
92_Clarity Admin and Dev Product - Navigate Access to the product management pages
92_Clarity Admin and Dev Product - View All Allows viewing of all products
92_Clarity Admin and Dev Project - Approve All Allows approval of all projects
Allows resource to run any job. Al lows scheduling of any job, editing of the job propfor any job and viewing the output of any job. This right is dependent on Jobs - Accbeing granted.
Allows resource to view the output of any job. This right is dependent on Jobs - Acbeing granted.
Allows resource to create, edit and view documents in the Knowledge Store thatresource has been given permission to.
Knowledge Store -Administrate
Allows resource to administer folders and documents in the Knowledge Store thatresource has been given permission to.
Management - CapacityPlanning
Allows resource to use the Capacity Planner feature for resources and projects theresource has access to. This right is dependent on the resource having rights toresources and projects at either the instance level or OBS level.
Allows resource to use Niku Author to create and save methods to the Niku 6 repoincluding any shipped methods. NOTE. Granting this right implies that a license to Niku Author module has been purchased.
Allowed resource access to the Program Management features for programs andprojects the resource has access to. This right is dependent on the resource havinrights to programs and projects at either the instance level or OBS level.
Management - Schedule In
Browser
Allows resource access to download offline timesheet template from the AccountSettings: Software Downloads page.
Allows resource to view and edit opportunity properties of any project to which theresource has view access. This right is dependent on the resource having either PView, Project View Management, Project - View Opportunity or Project Manager rigthe project.
Other Investment - ApproveAll
Other Investment - EditAccess All
Allows resource to view the definition of all pages in the administration tool. This rigdependent on Administration - Access right being granted.
Allows resource to view all customized portlet pages. This right is dependent on popages being linked to a menu before they can be displayed. If the portlet page is lito the Administration Menu then the user also must be granted the Administration Access right.
Allows resource to cancel a process instance from any of the process definitions in
system.
Allows resource to delete a process instance from any of the process definitions insystem.
Allows resource to manage process instance for any of the process definitions in thsystem.
Allows resource to start a new process instance from any of the process definitionssystem.
8/8/2019 Clarity v12 Security Design Chart
25/117
92_Clarity Admin and Dev
92_Clarity Admin and Dev Project - Delete All Allows resource to delete any project or program.
92_Clarity Admin and Dev Edit Assigned Tasks on any Project
92_Clari ty Admin and Dev Project - Edit Financial - All
92_Clarity Admin and Dev
92_Clari ty Admin and Dev Project - Edit Project Plan - Al l
92_Clarity Admin and Dev
92_Clari ty Admin and Dev Project - Enable Financial
92_Clari ty Admin and Dev Project - Enable Opportunity
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clari ty Admin and Dev Project - Modify Baseline - Al l
92_Clarity Admin and Dev Allows resource to edit all Project objects using secured subpage Billing (ID: 5004
92_Clarity Admin and Dev
92_Clari ty Admin and Dev Project - View Financial - Al l
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev Allows resource to view all requisitions, but not the individual requisition entries.
92_Clarity Admin and Dev Project - View Tasks - All
92_Clarity Admin and Dev Reports - Access
92_Clarity Admin and Dev Reports - Run - All
92_Clarity Admin and Dev Reports - View Output - All
92_Clarity Admin and Dev
92_Clarity Admin and Dev Resource - Approve Ideas All Allows approval of ideas for all resources
92_Clarity Admin and Dev
Project - Create/EditRequisitions - All
Allows resource to create and edit all requisitions. This right includes the right to nato the requisition pages.
Project - Edit Assigned Tasks- All
Allows resource to view and edit general properties, processes and financial informon all projects. This right will also allows the resource to enable financial fields on aproject.
Project - Edit Management -All
Allows resource to edit the general and management properties, staff and tasks foproject that has been enabled for management. This includes the ability to add subprojects to that project as well as to edit it in Microsoft Project and Open WorkbencThis right also allows the resource to create processes on any project and to edit tprocesses that he or she creates.
Allows resource to add unplanned tasks to any project when completing his timeshhe is a team member on that project.
Project - Edit RequisitionEntries - All
Allows resource to create and edit requisition entries. This right includes the right tonavigate to the requisition pages.
Allows resource to enable financials properties for project to which the resource haaccess. This right is dependent on the resource having either Project - View, ProjeView Management, Project - View Opportunity or Project Manager right for the pro
The resource will also be able to enable financial properties for projects where theresource is a participant or collaboration manager.
Allows resource to enable the opportunity properties for projects to which the resouhas view access. This right is dependent on the resource having either Project - ViProject View Management or Project Manager right for the project. The resource wbe able opportunity properties for projects where the resource is a participant orcollaboration manager.
Project - Financial Planning -All
Allows resource to view and edit the financial plan for all projects. This allows theresource to enter budgets and forecasts for all projects.
Project - Financial Planning -Budget
Allows resource to view and edit the financial budget plan for all projects. This allowresource to enter budgets for all projects.
Project - Financial Planning -Forecast
Allows resource to view and edit the financial forecast plan for all projects. This allothe resource to enter forecasts for all projects.
Project - Financial PlanningApproval - All
Allows resource to approve and submit the financial plan for all projects. This right allows resource to enter budgets and forecasts for all projects.
Project - Financial PlanningApproval - All - Budget
Allows resource to approve and submit the financial budget plan for all projects. Thright also allows resource to enter budgets for all projects.
Project - Financial PlanningApproval - All - Forecast
Allows resource to approve and submit the financial forecast plan for all projects. Tright also allows resource to enter forecasts for all projects.
Allows resource to baseline all projects which has been enabled for Management. rights also allows resource to view the general project properties and processes.
Project - Subpage Billing (ID:5004019) - Edit All
Project - Subpage Billing (ID:5004019) - View All
Allows resource to navigate to all Project objects using secured subpage Billing (ID5004019).
Allows resource to view the general and financial properties and processes on allprojects. This right does not include the right to view the financial plan(budgets/forecasts).
Project - View Management -
All
Allows resource to view the general and management properties and processes on
projects which has been enabled for management.
Project - View Opportunity -All
Allows resource to view all opportunities. The resource will be allowed to view themanagement, opportunity and process sections of the opportunity.
Project - View RequisitionEntries - All
Allows resource to view all requisition entries. This right includes the right to navigathe requisition pages.
Project - View Requisitions -All
Allows resource to view the tasks and work breakdown structure for all project to wthe resource has access.
Allows resource access to the reports pages. This right is dependent on either theReports - Run - All right or the resource being granted instance level rights such asReport - Run, Report - View Output or Report - Edit Properties.
Allows resource to run any report. Allows scheduling of any report, editing of the reproperties for any report and viewing the output of any report. This right is dependeReports - Access being granted.
Allows resource to view the output of any report. This right is dependent on ReportAccess being granted.
Reports and Jobs -Administrator Access
Access resource to view report and job definitions. The right also allows resource tthe reports and jobs categories.
Resource - AuthorizationAccess Screens
Allows resource access to Administrator pages for creating, editing and viewingresources. This right is dependent on Administration - Access being granted.
8/8/2019 Clarity v12 Security Design Chart
26/117
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev Resource - Edit - All
92_Clarity Admin and Dev Resource - Edit Ideas All Allows editing of ideas for all resources, includes delete
92_Clarity Admin and Dev Resource - External Access
92_Clarity Admin and Dev Resource - Hard Book - All
92_Clarity Admin and Dev Resource - Navigate
92_Clarity Admin and Dev Resource - Soft Book - All
92_Clarity Admin and Dev Resource - Update Skills
92_Clarity Admin and Dev Resource - View - All
92_Clarity Admin and Dev Resource - View Book - All Allows resource to view bookings for all resources.
92_Clarity Admin and Dev
92_Clarity Admin and Dev Resource - View Ideas All Allows viewing of ideas for all resources
92_Clarity Admin and Dev Resource Change - Create
92_Clarity Admin and Dev Resource Change - Edit All
92_Clarity Admin and Dev Resource Change - View All
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev
92_Clarity Admin and Dev Allows resources to view all risks, issues, and change requests on a project instan
92_Clarity Admin and Dev Software Download - JRE Grants access to download the JRE from account settings page.
92_Clarity Admin and Dev
92_Clarity Admin and Dev Grants access to download Open Workbench from account settings page.
92_Clarity Admin and Dev Grants access to download the SVG Viewer from account settings page.
92_Clarity Admin and Dev System Partition - Administer Enables administration of the System Partition
92_Clarity Admin and Dev Timesheets - Approve All Allows resource to approve all submitted timesheets in the system.
92_Clarity Admin and Dev Timesheets - Edit All Allows resource to edit all timesheets in the system.
92_Clarity Admin and Dev Timesheets - Navigate
92_Clarity Admin and Dev Custom Objects Editor Allows resource to edit the definition of a Custom Object in the administration tool.
92_Clarity Admin and Dev Menu Definition Editor - All Allows resource to edit and view the definitions of all menus in the administration t
92_Clari ty Admin and Dev Object - Create Definition Enables creation of a custom object
92_Clarity Admin and Dev Object Administration Customizable Object Administration
92_Clari ty Admin and Dev Page Definition Editor - All
Resource - DocumentManager - Read - All
Allows resource view-only access to the documents, folders and forms for resourcethe resource has been granted Resource - View for. This right is dependent on Re- Navigate being granted.
Resource - Document
Manager - Read / Write /Delete your own
Allows resource to create, view and edit documents and forms for resources that thresource has been granted Resource - View for. It also allows the resource to dele
documents, folder or forms that the resource has created. This right is dependent oResource - Navigate being granted.
Allows resource to view and edit general information, contact information, financialinformation, skills and calendar for all resources. This right is dependent on ResouNavigate being granted.
Allows access to the Resource list, Resource Finder and Requisitions. Includes theability to view resource general information, contact information, financial informaticalendar and skills of resources to which the user has been granted Resource - Vie
Allows resource to Soft or Hard book all resources to a projects that has been enafor management and that the resource has been granted Project - View or Project for.
Allows resource access to the Resource list, Resource Finder, and Requisitions paThe resource will only be able to view resource information for resources to which
resource has access.Allows resource to Soft book all resources to a projects that has been enabled formanagement and that the resource has been granted Project - Edit for.
Allows resource to create, edit and view skills for resources that the resource has bgranted Resource - View right for. This right also allows the resource to view resougeneral information, contact information, financial information and calendar, but doallow resource to edit that information. This right is dependent on Resource - Navigbeing granted.
Allows resource to view all resources and their information except the financial proof the resource. This right is dependent on Resource - Navigate being granted.
Resource - View Financial -All
Allows resource to view financial properties on all resources. This right is dependeResource - Navigate being granted.
Allows resource to create Resource Change objects. This includes the page navigaright.
Allows resource to edit all Resource Change objects. This includes the page navigright.
Allows resource to view all Resource Change objects. This includes the page navigright.
Resource Change
Top Related