Overview of PBCS Security
Access to PBCS components is controlled by the predefined user roles. Service Administrators or users with Access Control Manager can assign users to application-specific roles of planning.
For example, Service Administrators can assign a user to the Approval Administrator role of a planning application to enable the user to perform approvals-related activities.
Additionally, Service Administrators can create groups and assign roles to them. They can grant roles to many users at once, thereby reducing administrative overheads.
Roles can be assigned at the application level. It enhances the access rights of users, but it does not override privileges granted by a predefined role.
PBCS Roles
Service AdministratorPerforms all Planning and Planning Modules including granting roles to users. This role should be granted to functional experts who need to create and administer Planning, and Planning Modules.
Power UserViews and interacts with data. This role grants high-level access to several functional areas within an environment and should be granted to department heads and business unit managers, and business users in charge of a region who need to control the approval process.
A Power User can perform these activities:
- Creates and maintains forms, Oracle Smart View for Office worksheets, Reports, and Financial Reporting reports
- Creates and manages user variables for the application but cannot delete them.
- Views substitution variables
- Controls the approvals process, performs actions on approval units to which they have write access, and assigns owners and reviewers for the organization under her charge
- Creates Reports using Financial Reporting, accesses the repository to create folders and save artifacts
- Loads data using forms and Data Management
User
The User role was created by renaming the Planner role. If your service was provisioned after May 2016, you will see the User role and not the Planner role.
A User/Planner can perform these activities:
- Enters data into forms and submits them for approval, analyzes forms using ad hoc features, controls the ability to drill through to the source system
- Accesses and modifies (rename, delete) the Financial Reporting content stored in the Repository for which the user has View, Modify, or Full Control permissions.
- Previews Reports and Books
Viewer
Views and analyzes data through forms and data access tools. Typically, this role should be assigned to executives who need to view business plans during the budgeting process.
Assigning Roles to Users
You can assign predefined roles to users while creating them or by loading user assignments to role from a CSV file.
Any PBCS user assigned to the Identity Domain Administrator role can manage users and predefined role assignments.
Managing Groups
PBCS uses an internal repository to support role assignments at the application-level and to store information on the groups that you use during the role assignment process.
PBCS users and other groups can be members of groups maintained using Access Control. Users can be granted application roles by assigning a role to the group.
To enable you to view user assignments PBCS lists the predefined roles as groups. You cannot modify or assign roles to them from Access Control. Also, PBCS users, who are assigned to predefined roles, are listed in Access Control so that they can be added as group members.
In Manage Groups, the groups are by default sorted by Group Name values.
You can manage the groups by:
Creating GroupsService Administrators or users with Access Control Manager application role can create and manage groups. PBCS users and other groups can be members of a group.
To create groups:
- 1. Open Access Control .
- 2. In Manage Groups , click Create .
-
3. In
Create Group
, complete these steps:
- a. In Name , enter a unique group name (maximum 256 characters). Group names are not case-sensitive. EPM Cloud does not allow you to create groups with names identical to predefined role names (Service Administrator, Power User, User or Planner, and Viewer).
- b. Optional : Enter a group description.
-
4.Optional: Add groups to create a nested group.
- a. In Available Groups, search for groups. Groups that match the search criterion are listed. By default, this list is sorted by Group Name values.
- b. From Available Groups, select the member groups for the new group.
- c. Click Move. The selected groups are listed under Assigned Groups. To remove assigned groups, from Assigned Groups, select the group to remove, and then click Remove.
-
5. Optional: Add EPM Cloud users as members of the group. Only users who are assigned to a predefined role can be added as group members.
- a.Click Users.
- b.In Available Users, search for users. Users that match the search criterion are listed. By default, this list is sorted by User Login values.
- c.From Available Users, select the users to add to the group.
- d.Click Move.
- 6.Click Save.
- 7.Click OK.
Modifying Groups
Service Administrators or users with Access Control Manager application role can modify group properties, including group name. The application roles assigned to the group and other security assignments are not affected if you rename a group.
To modify groups:
- 1. Open Access Control.
- 2. Optional: In Manage Groups, locate the group to modify.
-
3. Groups that match the search criterion are listed. By default, this list is sorted by Group Name values.
Note:
Group names may contain up to 71 characters. However, only the first 34 characters appear in the list displayed in the Available Groups column.
- 4. Click Action button (Action) in the row of the group you want to modify, and then select Edit.
- 5. Optional: Modify group name. Changes to the group name do not impact the security assignments made using the group.
-
6. Modify group assignment:
-
a. Optional: Add nested groups:
- In Available Groups, search for groups.
- Groups that match the search criterion are listed. By default, this list is sorted by Group Name values.
- From Available Groups, select groups and click Move. Selected groups are listed in the Assigned Groups list.
-
b.Optional: Remove nested groups:
- From Assigned Groups, select the group to remove.
- Click Remove
-
a. Optional: Add nested groups:
-
7. Modify user assignment:
- a. Click Users.
-
b. Optional: Add users to group:
- In Available Users, search for users that you can assign as group members. Users that match the search criterion are listed. By default, this list is sorted by User Login values.
- From Available Users, select users and click Move. Selected users are listed in the Assigned Users list.
-
c. Optional: Remove users from the group:
- From Assigned Users, select the users to remove.
- Click Remove.
- 8. Click Save.
- 9. Click OK.
Deleting Groups
Service Administrators or users with Access Control Manager application role can delete groups. Deleting a group does not delete group members.
To delete a group:
- 1. Open Access Control.
- 2. Optional: In Manage Groups, search for the group to delete. Groups that match the search criterion are listed. By default, this list is sorted by Group Name values.
- 3. Click Action button (Action) in the row of the group you want to delete, and then select Delete.
- 4. Click Yes to confirm the delete operation.
- 5. Click OK.
Assigning a User to Many Groups
PBCS users can be members of many groups maintained using Access Control. Service Administrators or users with Access Control Manager application role can assign a user to many groups.
At any given time, a user can be a member of a maximum of 1,000 groups either directly or indirectly.
- 1. Open Access Control.
- 2. Click Manage Users.
- 3. Search for the user who is to be assigned to groups.
- 4. Users that match the search criterion are listed. By default, this list is sorted by User Login values.
- 5. Click Action button (Action) in the row of the user listing, and then select Edit. The Edit User screen, which lists detailed user information, including current group membership (in Assigned Groups), is displayed. On this screen, you can modify group assignments only.
- 6. Find groups to assign to the user. Groups that match the search criterion are listed. By default, this list is sorted by Group Name values.
-
7. Complete an action:
- To assign additional groups to the user, from Available Groups, select one or more groups and click (Move) to move the selected groups to Assigned Groups. Alternatively, click Move All button (Move All) to move all the groups in Available Groups to Assigned Groups.
- To remove groups assigned to the user, from Assigned Groups, select one or more groups and click Remove button (Remove) to move the selected groups to Available Groups. Alternatively, click Remove All button (Remove All) to move all the groups in Assigned Groups to Available Groups.
- 8. Click Save.
- 9. Click OK.
Partner SpotLight
Oracle
Oracle has the most comprehensive suite of integrated, global business applications that enable organizations to make better decisions, reduce cost..
Our Company
MindStream Analytics' senior staff was there at the birth of Business Intelligence. We have been part of building Business Intelligence nationally from its humble niche product status to the ubiquitous analytic tool that it is today. MindStream consultants are well versed in reporting and information management and are ready to help you leverage the power of multiple tier-1vendors. From Oracle Hyperion to IBM Cognos, we can help you select and integrate the right tools for you to better understand your information. MindStream Analytics has experience across a wide variety of industries: Business Services, Consumer Products, Energy, Financial Services, Healthcare, Manufacturing, Transportation , and Telecommunication. We have the depth and breadth of experience to help you deliver actionable information to users.
Whether you need an enterprise wide Oracle BI Enterprise Edition (OBIEE) rollout, an Oracle BI Apps rollout, or an IBM Cognos ReportNet rollout, MindStream Analytics is here to help you succeed.
Case Studies
Accumen
Thanks to the intervention of MindStream Analytics, Accumen's Finance department can now model their business with a new, more organized structure that isn't conventionally available in NetSuite.
Acme Brick
Acme Brick turned to MindStream Analytics for help implementing OneStream to replace their outdated TM1 solution.
Alterra
Alterra sought the expertise of MindStream to address the challenges they faced in their Capital Planning process.
ATCO Group
Energy conglomerate ATCO operates worldwide in utilities, power generation, and related services.
Avalon
Working with MindStream Analytics, Avalon Healthcare Solutions adopts NetSuite Planning and Budgeting to accelerate budgeting and forecasting processes.
Bayer Health Care
Bayer Healthcare implemented Hyperion Planning and Workforce Planning in 10 weeks to dramatically streamline their Income Statement budget and Workforce Planning process..
BluEarth
MindStream Analytics' partnership with BluEarth Renewables epitomizes the power of technology and collaboration.
Celgene
An Oracle Hyperion Planning Upgrade provides multi-national organization Hyperion Application optimization and stabilization.
Cleaver Brooks
OneStream XF was chosen as the platform that would transform Cleaver-Brooks' Finance processes.
CoorsTek
The collaboration between CoorsTek and MindStream resulted in significant improvements in CoorsTek's financial consolidation and reporting processes.
Elite Body Sculpture
MindStream Analytics' collaboration with Elite Body Sculpture encapsulates the transformative potential of targeted tech solutions in streamlining administrative processes.
Enlyte
Enlyte, a merger of Mitchell, Genex, and Coventry, faced challenges with disparate financial solutions and the need for combined reporting.
Flanders
MindStream Analytics collaborated with Flanders to implement OneStream Consolidation and Reporting solution.
Foley Products
Foley Products was facing a significant challenge with its Excel-based actual management reporting system.
Harte Hanks
The collaboration between MindStream Analytics and Harte Hanks culminated in a highly customized, user-friendly NetSuite implementation.
Interface
Interface used a complex, manual, excel-based FP&A process for monthly review, and the summary data was loaded in OneStream.
Kymera International
Thanks to Mindstream Analytics' assistance, Kymera was able to load all of their data into OneStream and validate it successfully.
MacLean Fogg
MacLean-Fogg partnered with MindStream, a leading implementor specializing in modernizing and optimizing enterprise systems.
MEPPI
MindStream's expertise and experience were sought to conduct a vendor selection initiative focusing on MEPPI's F2023 planning process.
OUAI
MindStream Analytics and OUAI's collaboration showcases the transformative power of strategic technological intervention.
Plaskolite
By migrating to OneStream, Plaskolite has achieved a material reduction in consolidation time and overall Financial Close cycle, eliminated the hours spent compiling and verifying data in Excel, streamlined its Planning, Budgeting and Forecasting model and delivered flexible and timely reporting that enables more strategic analysis of their financial data.
Redwire
Understanding the nuances of Redwire's challenges, MindStream Analytics devised a holistic approach to overcome them. The implementation of NetSuite was just the beginning.
Simon
Simon's existing corporate Hyperion Financial Management (HFM) production application was consolidating at a rate of seven hours, a performance issue causing great headache to corporate Accounting.
Source Code
The successful transition to OneStream revolutionized Source Code's financial reporting.
Subway
Subway collaborated with MindStream Analytics for the NetSuite Analytics Warehouse implementation.
UPenn
MindStream Consulting and AppCare team members are proud be working side by side with UPenn university in accomplishing this implementation and along with continuing our AppCare services after go-live.
USG
USG was an Oracle Hyperion customer realizing that it needed more specialized support for its various Oracle Hyperion applications.
Vantiv
Dividing a hyperion planning application, expanding the hyperion footprint to forecast on the business? Customer categories.
Versant Health
Versant Health engaged MindStream to help resolve the challenges they were experiencing with their consolidation, close, and financial reporting processes.
Virginia Spaceport Authority
The MindStream team implemented the Standard + Workforce NetSuite Planning & Budgeting.
WeWork
MindStream Analytics determined that the best solution was to implement Oracle Essbase Cloud as part of the Oracle Analytics Cloud (OAC) platform-as-a-service
WindStream
Innovative use of essbase to streamline and connect hyperion financial management for enhanced financial analysis.
XY Planning
MindStream Analytics, well-versed in addressing such challenges, presented a comprehensive Netsuite solution for XY Planning.