Access Rights Reference

HID_ref_access_rights
ccppmod152
HID_ref_access_rights
System administrators can use access rights to assign read or write privileges to users for features and functions, including the 
New User Experience
. For example, assign portfolio managers 
Portlet - View
 instance rights so users can access the portfolio pages. Assign 
Portfolio - Edit - All
 global rights so users can edit all portfolios.
You can assign access rights at these levels:
  • Instance
    Provides access to object instances. For example, a specific portfolio, rather than all portfolios.
  • Organization Breakdown Structure (OBS) Unit
    (Not typical for user groups.) Provides access rights to all instances having the selected OBS unit.
  • Global 
    Provides unlimited access to an object. For example, all portfolios rather than a specific portfolio.
The same levels apply when you assign access rights for the pages and portlets included in an optional add-in.
: For new deployments, the default admin user includes a subset of rights to administer the application; however, this user is not a
superuser
with full access to all features. To create a superuser, assign all global access rights to a
resource
(the admin user). To create multiple superusers, assign all global access rights to a
group
such as System Administrator. Then, assign one or more resources (the admin users) to the group.
 
Assign Instance-Level Access Rights to a Resource
You can assign a resource instance-level access rights to a specific object, such as to a page or project.
Follow these steps:
  1. Open Administration, and from Organization and Access, click Resources.
  2. Click the resource name.
  3. Open the Access Rights menu and click Instance.
  4. Click Add.
  5. Select the object from the drop-down list and click Next.
  6. Select the access rights that you want to assign to the user, and click Add and Continue.
  7. Select the specific instances that you want to give the user access to, and click Add.
Assign Instance-Level Access Rights to a User Group
Assign instance-level access rights to provide access to specific object instances. For example, assign portfolio managers instance-level access to the Portfolio portlet pages so they can work with portfolios.
Follow these steps:
  1. Open Administration, and from Organization and Access, click Groups.
  2. Click the group name.
  3. Open the Access Rights menu and click Instance.
    If the user group is new, no access rights appear.
  4. Click Add.
  5. Select an object from the drop-down list and click Next.
  6. Select the access rights to assign to the user group and click Add and Continue.
    If more access rights are available on additional pages, select the access rights and click Add and Select More. Continue assigning access rights until all appropriate access rights have been assigned.
  7. Select the instances that you want by clicking the corresponding check boxes and click Add.
    If more instances are available on additional pages, select the instances and click Add and Select More. Continue assigning instances until all appropriate instances have been added.
  8. Complete one of these steps after you have finished assigning instance level access rights to the user group:
    • Click Continue to add global access rights, if the user group needs access rights for all instances of an object.
    • Click Return to go back to the Groups page.
After you assign instance-level access rights to a user group, you have successfully created a user group with access rights. The users in the group can now perform their assigned tasks.
Assign Global-Level Access Rights to a User Group
Assign global access rights for all instances of an object to system administrators or super users so that they can perform both end-user and administrative functions. For example, assign a user group, named
Portfolio - Managers
, global access rights to the Portfolios object. With this access, group members can create, edit, or remove portfolios.
Follow these steps:
  1. Open Administration, and from Organization and Access, click Groups.
  2. Click the group name.
  3. Open the Access Rights menu and click Global.
    If the user group is new, no access rights appear.
  4. Click Add.
  5. Select the appropriate global rights for the user group and click Add.
    If more access rights are available on additional pages, click Add and Select More. Continue assigning access rights until all appropriate access rights have been assigned.
  6. When you have finished assigning global rights to the user group, click Return.
    After you assign global access rights to a user group, the users in the group can now perform their assigned tasks.
Assign XOG Access Rights to a Resource
These steps explain how to assign XOG access rights to a resource.
Follow these steps:
  1. Open Administration, and from Organization and Access, click Resources.
  2. Click the resource last name.
  3. Open the Access Rights menu and click Global.
  4. Click Add.
  5. Enter
    *XOG Access
    in the Access Right field and click Filter.
  6. Select the appropriate XOG access rights and click Add.
Auto-Access Rights
Auto-access rights are granted automatically when you are assigned to a role or when you perform a certain action. For example, if you are assigned as a project manager, you are automatically given the 
Project - Manager (Auto)
 access right. This right allows you to view and edit the general and management properties of the project.
To view the list of access rights for a resource (user), click Administration, Organization and Access, Resources. These rights become visible in a resource’s list of assigned access rights only after the condition is met. If you are removed as the project manager, then this auto-access right is removed.
The product provides these auto-access rights:
  • Application - Manager (Auto)
    This right is equivalent to 
    Application - Edit
    , and is automatically granted to an Application Manager.
    Type:
     Application
  • Asset - Manager (Auto)
    This right is equivalent to Asset - Edit, and is automatically granted to an Asset Manager.
    Type:
     Asset
  • Idea - Initiator (Auto)
    Automatic right that is granted to the initiator of an idea.
    Type:
     Idea
  • Idea - Manager (Auto)
    Automatic right that is granted to the manager of an idea.
    Type:
     Idea
  • Job Type Creator (Auto)
    This right is automatically granted to the creator of a job type when it is created.
    Type:
     Job
  • Other Work - Manager - Automatic
    Automatic right that is granted to the manager of Other Work; equivalent to Other Work - Edit.
    Type:
     Other Work
  • Page Creator (Auto)
    Allows a user to edit a page.
    Type:
     Page
  • Portfolio - Owner (Auto)
    Automatic right that is granted to the owner of a portfolio.
    Type:
     Portfolio
  • Portfolio - Stakeholder (Auto)
    Automatic right that is granted to a stakeholder of a portfolio.
    Type:
     Portfolio
  • Portlet Creator (Auto)
    Allows a user to edit a portlet.
    Type:
     Portlet
  • Product - Manager (Auto)
    Allows a user to baseline all products. This right does not include the Product - Navigate right, and requires the user to have the Product - Edit right.
    Type:
     Product
  • Project - Discussion Manager (Auto)
    This right is automatically created for the user who creates a project, and makes the creator of the project the Collaboration Manager. The user can subsequently grant Collaboration Manager rights to additional resources or revoke this right by changing it to participant.
    Type:
     Project
  • Project - Manager (Auto)
    The user who enables a project for management is automatically granted this right. The user becomes the Project Manager for the project. This right allows a user to view and edit the general and management properties of the project.
    Type:
     Project
  • Project - Participant (Auto)
    A user who is assigned to a project as a project participant is automatically assigned this right. The right allows the user access to Action Items, Project Calendar, Document Manager and Discussions.
    Type:
     Project
  • Project - Participant Groups (Auto)
    Type:
     Project
    A user who is assigned to a project through a project group is automatically assigned this right. The right allows the user access to Action Items, Project Calendar, Document Manager and Discussions.
  • Release - Manager (Auto)
    Automatic right that is granted to the manager of a Release.
    Type:
     Release
  • Release Plan - Manager (Auto)
    Automatic right that is granted to the manager of a Release Plan.
    Type:
     Release Plan
  • Requirement - Manager (Auto)
    Automatic right that is granted to the manager of a Requirement.
    Type:
     Requirement
  • Resource - Manager (Auto)
    The user creating a new resource is automatically granted this right. The user becomes the resource manager for the resource. This right allows the user to view and edit general resource properties. If the resource is assigned another resource manager, the current resource manager loses rights to the resource.
    Type:
     Resource
  • Resource - Self (Auto)
    Rights that are automatically granted to a resource when created and includes Resource - Edit Ideas.
    Type:
     Resource
  • Scenario - Creator (Auto)
    This right includes Scenario - Edit and Scenario - Edit Access Rights, and is automatically granted to the Scenario creator.
    Type:
     Scenario
  • Service - Manager Auto
    Automatic right that is granted to the manager of a service.
    Type:
     Service
 
Basic User Group Access Rights
The 
Basic group for user access
 is a group that every user is automatically assigned to when they are added to CA PPM. The members of this group automatically inherit the access rights of the group. By default, all users are members of the group 
Basic group for user access
, which provides these access rights:
  • Account Settings - Navigate
    Users can navigate to the Account Settings page.
    Type:
     Global
  • Organizer - Access
    Users can access the Organizer page and the Actions, Events, and Notifications portlets available from the Organizer page.
    Type:
     Global
  • Projects - Navigate
    Users can navigate to the Projects list page and to the My Projects portlet.
    Type:
     Global
 
Basics User Access Rights
Audit Trail Access Rights
The following access rights are available for audit:
  • Audit Trail - Access
    Allows users to access audit page.
    Type
    : Global
  • Audit Trail - View - All
    Allows users to view any audit page.
    Type
    : Global
Dashboard Access Rights
The following access rights are available for dashboards:
  • Dashboard - Create
    Allows users to create new dashboards from 
    CA PPM
    Type: 
    Global
  • Dashboard - Navigate
    Allows users to navigate to any dashboard page in 
    CA PPM
    Type: 
    Global
Knowledge Store Access Rights
Access to the Knowledge Store and to its folders and documents are provided at the following levels:
  • Access rights at the Knowledge Store level
  • Permissions at the folder and document levels
The following rights to access are required to manage or view content in the Knowledge Store:
  • Knowledge Store - Administrate
    Allows you to access all of the folders and documents in the Knowledge Store. Only users with the Knowledge Store - Administrate access right can create folders at the top level of the Knowledge Store folder tree. Users with the Knowledge Store - Access right and with the appropriate permissions can add sub folders and documents to the folders.
  • Knowledge Store - Access
    Allows you to create, edit, and view documents and folders in the Knowledge Store to which you have access. Allows you to delete the folders you created, and the documents you added.
  • Knowledge Store - View All
    Allows you to view all documents in the Knowledge Store.
Page Access Rights
The following access rights are available for pages:
  • Page - View
    Allows users to view a general page in 
    CA PPM
    . For instance pages (such as portfolio pages), this right is not required.
    Type: 
    Instance
  • Page Definition Editor
    Allows users to edit, view, and delete the definition of a specific page. 
    Required:
     
    Administration - Studio
     access right to access the Studio menu.
    Type: 
    Instance
  • Page Definition Editor - All
    Allows users to edit, view, and delete the definition of all pages. 
    Required:
     
    Administration - Studio
     access right to access the Studio menu.
    Type:
     Global
  • Page Definition Viewer
    Allows the user to view the definition of a specific page.
    Required:
     
    Administration - Studio
     access right to access the Studio menu.
    Type: 
    Instance
  • Page Definition Viewer - All
    Allows the user to view the definition of all pages.
    Required:
     
    Administration - Studio
     access right to access the Studio menu.
    Type: 
    Global
  • Page Viewer - All
    Lets the user view any configured portlet page. Before the users can view them, link the portlet pages to a menu. The user requires the rights to navigate the menu. For example, if a page links to the Administration menu, the users require the 
    Administration - Access
     right.
    Type: 
    Global
Software Download Access Rights
The following access rights are available for downloading software:
  • Software Download - Microsoft Project Interface
    Allows users to download the CA PPM Microsoft Project Interface.
    Type: 
    Global
  • Software Download - Open Workbench
    Required to download Open Workbench.
    Type: 
    Global
Timesheets Access Rights
The following access rights are available for timesheets:
  • Timesheets - Navigate
    Allows you to navigate to timesheet pages.
    Type
    : Global
  • Timesheets - Edit All
    Allows users to edit all timesheets.
    Type:
     Global
  • Timesheets - Approve All
    Allows users to approve all submitted timesheets.
    Type:
     Global
  • Resource - Enter Time
    Allows users to complete and submit timesheets for a specific resource.
    Type
    : Instance
  • Project - Edit Project Plan
    Allows users to add unplanned tasks to a specific project when completing their timesheets when they are a team member on the project.
    Type:
     Instance
New User Experience
 Access Rights
You require the following access rights to navigate the
New User Experience
.
  • Classic PPM - Navigate
    Allows access to Classic 
    CA PPM
     from the 
    New User Experience
    .
  • Resource Management - Navigate
    Allows access to the Resources main menu in the 
    New User Experience
    . To use the new resource management features, the user also needs resource booking and investment rights.
  • Timesheets - Navigate
    Allows access to Timesheets in the 
    New User Experience
    provided Timesheets has been activated in Classic
    CA PPM
    under System Options.