Clarity Access Rights Reference
Clarity
Access Rights Referenceccppmop1581
HID_ref_access_rights
System administrators can use access rights to assign read or write privileges to users for features and functions, including
Clarity
. For example, assign portfolio managers Portlet - View
instance rights so users can access the portfolio pages. Assign Portfolio - Edit - All
global rights so users can edit all portfolios.You can assign access rights at these levels:
- Instance:Provides access to object instances. For example, a specific portfolio, rather than all portfolios.
- Organization Breakdown Structure (OBS) Unit:(Not typical for user groups.) Provides access rights to all instances in the selected OBS unit.
- Global:Provides unlimited access to an object. For example, all portfolios rather than a specific portfolio.
The same levels apply when you assign access rights for the pages and portlets included in an optional add-in.
For new deployments, the default admin user includes a subset of rights to administer the application; however, this user is not a
superuser
with full access to all features. To create a superuser, assign all global access rights to a resource
(the admin user). To create multiple superusers, assign all global access rights to a group
such as System Administrator. Then, assign one or more resources (the admin users) to the group.2
Assign Instance-Level Access Rights to a Resource
You can assign a resource instance-level access rights to a specific object, such as to a page or project.
Follow these steps:
- ClickAdministration,Organization and Access,Resources.
- Click a resource name.
- Open theAccess Rightsmenu and clickInstance.
- ClickAdd.
- Select the object from the drop-down list and clickNext.
- Select the access rights that you want to assign to the user, and clickAdd and Continue.
- Select the specific instances that this user can access and clickAdd.
Assign Instance-Level Access Rights to a User Group
Assign instance-level access rights to provide access to specific object instances. For example, assign portfolio managers instance-level access to the Portfolio portlet pages so they can work with portfolios.
Follow these steps:
- ClickAdministration,Organization and Access,Groups.
- Click a group name.
- Open theAccess Rightsmenu and clickInstance.If the user group is new, no access rights appear.
- ClickAdd.
- Select an object from the drop-down list and clickNext.
- Select the access rights to assign to the user group and clickAdd and Continue.If more access rights are available on additional pages, select the access rights and click Add and Select More. Continue assigning access rights until all appropriate access rights have been assigned.
- Select the instances that you want by clicking the corresponding check boxes and clickAdd.If more instances are available on additional pages, select the instances and click Add and Select More. Continue assigning instances until all appropriate instances have been added.
- Complete one of these steps after you have finished assigning instance-level access rights to the user group:
- ClickContinueto add global access rights, if the user group needs access rights for all instances of an object.
- ClickReturnto go back to the Groups page.
After you assign instance-level access rights to a user group, you have successfully created a user group with access rights. The users in the group can now perform their assigned tasks.
Assign Global-Level Access Rights to a User Group
Assign global access rights for all instances of an object to system administrators or super users so that they can perform both end-user and administrative functions. For example, assign a user group, named
Portfolio - Managers
, global access rights to the Portfolios object. With this access, group members can create, edit, or remove portfolios.Follow these steps:
- ClickAdministration,Organization and Access,Groups.
- Click the group name.
- Open the Access Rights menu and clickGlobal.If the user group is new, no access rights appear.
- ClickAdd.
- Select the appropriate global rights for the user group and clickAdd.
- If more access rights are available on additional pages, clickAdd and Select More. Continue assigning access rights until all appropriate access rights have been assigned.
- When you have finished assigning global rights to the user group, clickReturn.After you assign global access rights to a user group, the users in the group can now perform their assigned tasks.
Filter for Specific Access Rights
You can assign a group of access rights (for example, all roadmap access rights for
Clarity
) to a user. You can filter for these access rights and avoid browsing through pages of access rights.Follow these steps:
- ClickAdministration,Organization and Access,Resources.
- Click the last name link for the user.
- ClickResource's Access Rightsand selectGlobal.
- ClickAdd.
- In theDescriptionfield in the filter section, enter a description for the access rights. Use wildcard asterisks (*) before or after (or both) to return matching results. For example, enter the following value to search for all access rights for the Roadmaps feature:*roadmap*
- ClickFilter.
Another popular example is to assign XOG global access rights to a user. Perform the same steps and enter
*XOG Access
in the Access Right field and click Filter. Select the appropriate XOG access rights and click Add.Auto-Access Rights
Auto-access rights are granted automatically when you are assigned to a role or when you perform a certain action. For example, if you are assigned as a project manager, you are automatically given the
Project - Manager (Auto)
access right. This right allows you to view and edit the general and management properties of the project.To view the list of access rights for a resource (user), click Administration, Organization and Access, Resources. These rights become visible in a resource’s list of assigned access rights only after the condition is met. If you are removed as the project manager, then this auto-access right is removed.
The application provides these auto-access rights:
- Application - Manager (Auto)This right is equivalent toApplication - Edit, and is automatically granted to an Application Manager.Type:Application
- Asset - Manager (Auto)This right is equivalent to Asset - Edit, and is automatically granted to an Asset Manager.Type:Asset
- Idea - Initiator (Auto)Automatic right that is granted to the initiator of an idea.Type:Idea
- Idea - Manager (Auto)Automatic right that is granted to the manager of an idea.Type:Idea
- Job Type Creator (Auto)This right is automatically granted to the creator of a job type when it is created.Type:Job
- Other Work - Manager - AutomaticAutomatic right that is granted to the manager of Other Work; equivalent to Other Work - Edit.Type:Other Work
- Page Creator (Auto)Allows a user to edit a page.Type:Page
- Portfolio - Owner (Auto)Automatic right that is granted to the owner of a portfolio.Type:Portfolio
- Portfolio - Stakeholder (Auto)Automatic right that is granted to a stakeholder of a portfolio.Type:Portfolio
- Portlet Creator (Auto)Allows a user to edit a portlet.Type:Portlet
- Product - Manager (Auto)Allows a user to baseline all products. This right does not include the Product - Navigate right, and requires the user to have the Product - Edit right.Type:Product
- Project - Discussion Manager (Auto)This right is automatically created for the user who creates a project, and makes the creator of the project the Collaboration Manager. The user can subsequently grant Collaboration Manager rights to additional resources or revoke this right by changing it to participant.Type:Project
- Project - Manager (Auto)The user who enables a project for management is automatically granted this right. The user becomes the Project Manager for the project. This right allows a user to view and edit the general and management properties of the project. The access right allows the user to edit only some limited financial fields.Type:Project
- Project - Participant (Auto)A user who is assigned to a project as a project participant is automatically assigned this right. The right allows the user access to Action Items, Project Calendar, Document Manager, and Discussions. This right includes the Project - View right. The right does not include the access to view tasks.Type:Project
- Project - Participant Groups (Auto)Type:ProjectA user who is assigned to a project through a project group is automatically assigned this right. The right allows the user access to Action Items, Project Calendar, Document Manager and Discussions.
- Release - Manager (Auto)Automatic right that is granted to the manager of a Release.Type:Release
- Release Plan - Manager (Auto)Automatic right that is granted to the manager of a Release Plan.Type:Release Plan
- Requirement - Manager (Auto)Automatic right that is granted to the manager of a Requirement.Type:Requirement
- Resource - Manager (Auto)The user creating a new resource is automatically granted this right. The user becomes the resource manager for the resource. This right allows the user to view and edit general resource properties. If the resource is assigned another resource manager, the current resource manager loses rights to the resource.Type:Resource
- Resource - Self (Auto)Rights that are automatically granted to a resource when created and includes Resource - Edit Ideas.Type:Resource
- Scenario - Creator (Auto)This right includes Scenario - Edit and Scenario - Edit Access Rights, and is automatically granted to the Scenario creator.Type:Scenario
- Service - Manager AutoAutomatic right that is granted to the manager of a service.Type:Service
Auto-Access Rights Used in
Clarity
- Project - Manager (Auto)Automatic right that is granted when a user creates a project inClarityor when the user is set as the project manager on a project.
- Resource - Manager (Auto)Automatic right that is granted when a staff member is assigned a resource manager inClassic PPM. The right includes both soft and hard booking rights for the team member.
Basic User Group Access Rights
The
Basic group for user access
is a group that every user is automatically assigned to when they are added to Classic PPM
. The members of this group automatically inherit the access rights of the group. By default, all users are members of the group Basic group for user access
, which provides these access rights:- Account Settings - NavigateUsers can navigate to the Account Settings page.Type:Global
- Organizer - AccessUsers can access the Organizer page and the Actions, Events, and Notifications portlets available from the Organizer page.Type:Global
- Projects - NavigateUsers can navigate to the Projects list page and to the My Projects portlet.Type:Global
Basics User Access Rights
Audit Trail Access Rights
The following access rights are available for audit:
- Audit Trail - AccessAllows users to access audit page.Type: Global
- Audit Trail - View - AllAllows users to view any audit page.Type: Global
Dashboard Access Rights
The following access rights are available for dashboards:
- Dashboard - CreateAllows users to create new dashboards inClassic PPM.Type:Global
- Dashboard - NavigateAllows users to navigate to any dashboard page inClassic PPM.Type:Global
Knowledge Store Access Rights
Access to the Knowledge Store and to its folders and documents are provided at the following levels:
- Access rights at the Knowledge Store level
- Permissions at the folder and document levels
The following access rights are required to manage or view content in the Knowledge Store:
- Knowledge Store - AdministrateAllows you to access all of the folders and documents in the Knowledge Store. Only users with the Knowledge Store - Administrate access right can create folders at the top level of the Knowledge Store folder tree. Users with the Knowledge Store - Access right and with the appropriate permissions can add sub folders and documents to the folders.
- Knowledge Store - AccessAllows you to create, edit, and view documents and folders in the Knowledge Store to which you have access. Allows you to delete the folders you created, and the documents you added.
- Knowledge Store - View AllAllows you to view all documents in the Knowledge Store.
Page Access Rights
The following access rights are available for pages:
- Page - ViewAllows users to view a general page inClassic PPM. For instance pages (such as portfolio pages), this right is not required.Type:Instance
- Page Definition EditorAllows users to edit, view, and delete the definition of a specific page.Required:Administration - Studioaccess right to access the Studio menu.Type:Instance
- Page Definition Editor - AllAllows users to edit, view, and delete the definition of all pages.Required:Administration - Studioaccess right to access the Studio menu.Type:Global
- Page Definition ViewerAllows the user to view the definition of a specific page.Required:Administration - Studioaccess right to access the Studio menu.Type:Instance
- Page Definition Viewer - AllAllows the user to view the definition of all pages.Required:Administration - Studioaccess right to access the Studio menu.Type:Global
- Page Viewer - AllLets the user view any configured portlet page. Before the users can view them, link the portlet pages to a menu. The user requires the rights to navigate the menu. For example, if a page links to the Administration menu, the users require theAdministration - Accessright.Type:Global
Report and Job Access Rights
The following access rights are available for users who run and review reports:
- Reports - AccessAllows users to access reports pages and the My Reports portlet. This access right is dependent on one of the following access rights being granted to a user:
- TheReports - Run - Allaccess right
- Instance level access rights such asReport - Run,Report - View Output, orReport - Edit Properties
Type: Global - Reports - Run - AllAllows users to run any report. This right also allows users to schedule, edit properties, and view the output of any report.Requires:Reports - Access rightType:Global
- Reports - View Output - AllAllows users to view the output of any report.Requires:Reports - Access rightType:Global
- Reports and Jobs - Administrator AccessAllows user to view report and job definitions. The right also allows user to view the reports and jobs categories.Type:Global
- Reports and Jobs - Create DefinitionAllows user to create, edit, and view report or job definitions.Requires: Report and Jobs - Administer AccessType:Global
- Reports and Jobs - Edit Definition - AllAllows user to edit any report or job definition.Requires: Report and Jobs - Administer AccessType:Global
- Report - RunAllows users to run specific reports, edit scheduled report properties, and review output.Requires:Reports - Access rightType:Instance
- Reports and Jobs - Edit DefinitionAllows the user to view and edit a report or job definition.Requires: Report and Jobs - Administer AccessType:Instance
Software Download Access Rights
The following access rights are available for downloading software:
- Software Download - Microsoft Project InterfaceAllows users to download theClassic PPMMicrosoft Project Interface.Type:Global
- Software Download - Open WorkbenchRequired to download Open Workbench.Type:Global
Timesheet Access Rights
The following access rights are available for timesheets:
- Timesheets - NavigateAllows you to navigate to timesheet pages.Type: Global
- Timesheets - Edit AllAllows users to edit all timesheets.Type:Global
- Timesheets - Approve AllAllows users to approve all submitted timesheets.Type:Global
- Resource - Enter TimeAllows users to complete and submit timesheets for a specific resource.Type: Instance
- Project - Edit Project PlanAllows users to add unplanned tasks to a specific project when completing their timesheets when they are a team member on the project.Type:Instance
Clarity
Access RightsThe following access rights control what users can do in
Classic PPM
and Clarity
. Unless stated otherwise, all of the following access rights are global
. Some rights are available at the instance-level
, as noted. The access rights for the new user interface generally do not extend into Classic PPM
, which has its own set of access rights.5
5
- Administration - AccessAllows administrators to access the Administration menus in bothClassic PPMandClarity. Users need additional rights to perform individual administrative actions.
- Classic PPM- NavigateAllows users and administrators to access theClassic PPMfeatures from theClaritymain menu.
- Project Management - NavigateAllows users to access the Project grid page and related project management pages inClarity. The pages include only the projects that the user has permission to access.
- Project Management - Tiles NavigateAllows users to access the Project tiles page inClaritywhere projects appear as tiles. The page includes only the project tiles that the user has permission to access.
- Roadmap - NavigateAllows the user to access the roadmap pages. Users can only view information for roadmaps to which they have access. To create, edit, or delete roadmaps, users need additional access rights.
- Staffing - NavigateAllows users to access the resource staffing pages inClarity. To use the new resource management features, the user also needs resource booking and investment rights.
- Timesheets - NavigateAllows users to access timesheets inClarityprovided the Timesheets feature is active inClassic PPMunder System Options.
- Tasks - NavigateAllows users to navigate to the Tasks page from the main menu ofClarity. Users require minimum access to view projects and tasks. Users are typically focused on their own assigned tasks; however, with this access right, a user or team member can view all the assigned tasks for the projects that they have access to view or edit. The Tasks grid does not include phases, milestones, or unassigned tasks. With additional rights, a project manager can view the tasks for all their project team members. For example, theProject - Task Managementaccess right allows a user to add, edit, and delete tasks inClarityand can be granted for specific projects or OBS units.
- Custom Investment - NavigateAllows users to access the custom investment page inClarity. Users require navigate and view rights for each custom investment type to access the custom investment instance information.
- Resource Management - NavigateAllows users to access the Resources page inClarity. Users can use the Resources page to create and view teams inClarity.
Clarity
: Blueprint Access RightsThe following blueprint rights are typically assigned to an application owner, content designer, or administrator. Users assigned these access rights also require the
Administration - Access
right. Blueprint rights apply to projects and custom investment types.- Blueprint - Create CopyAllows the user to create a copy of any existing blueprint including the standard blueprint. IncludesBlueprint - View - Allright.
- Blueprint - Delete - AllAllows the user to delete all blueprints except the standard blueprint. IncludesBlueprint - View - Allright.
- Blueprint - Edit - AllAllows the user to edit all blueprints except the standard blueprint. IncludesBlueprint - View - Allright. The access right allows the user to delete fields or sections in the blueprint, rename the blueprint, associate templates to project blueprints, associate custom investment types with investment blueprints, or mark a blueprint as the default.
- Blueprint - View - AllAllows the user to view all blueprints and the names of the associated templates or custom investment types. This right also allows the user to view the published, detailed layout of all blueprints.
Clarity
: Custom Investment Access RightsThe
Custom Investment - Navigate
access right allows users to see the main parent page for custom investments. To navigate to a specific type of investment, users require the corresponding navigation rights for each type of custom investment object.The following sequence of steps describes how these access rights work:
- InClassic PPM, an administrator creates a custom investment type. For example, the administrator creates a custom investment type namedProduct Demo.
- The system generates a corresponding navigation access right:Product Demo - Navigate. The right is auto-assigned to the user who created the new investment type. The application also assigns the global create right and instance rights for viewing and editing.
- InClassic PPM, an administrator assigns the newProduct Demo - Navigateright to some users individually, in groups, or in OBS units. Other users do not have this right.
- Both sets of users are granted theCustom Investment - Navigateglobal access right.
- InClarity, both sets of users can navigate to the Custom Investments page. However, only the first set of users can view and open the list of product demos. The second group cannot view that tile on the parent investment page. The custom investment type tiles are shown or hidden based on the system-generated navigation right for each type of custom investment.
- When you create a custom investment type, the application also creates all the necessary rights you need to effectively administer access to the new custom investment. Assign the appropriate rights to users:<custom_investment_type> - Budget Plan - Approve All<custom_investment_type> - Budget Plan - Edit - All<custom_investment_type> - Budget Plan - View - All<custom_investment_type> - Cost Plan - Edit - All<custom_investment_type> - Cost Plan - View - All<custom_investment_type> - Create<custom_investment_type> - Edit All<custom_investment_type> - Navigate<custom_investment_type> - Task Management - All<custom_investment_type> - View All<custom_investment_type> - XOG Access
Clarity
: Ideas- Idea Management - NavigateAllows a user to access the idea management pages inClarity. Additional access rights determine which ideas the user can view or edit. The PMO System Administrator Security group includes this access right. All users in the group inherit the group access rights.
Clarity
: Task Access RightsTo manage tasks, a user needs the
Tasks - Navigate
right and either the Participant (Auto)
or explicit Project - View Management
rights to the project. The following task rights are also available:- Project - Tasks ViewAllows the user to view the task inside the task details panel.
- Project - Task Management - AllAllows the user to create, edit, and delete task details and assignments in projects that they are permitted to view. This right includes theProject - Tasks Viewright. Use this global right in combination with instance, OBS, or global projectviewaccess rights to allow a user to manage their tasks and assignments in multiple projects.
The
Project - Edit
access right is not required to access and manage tasks inside a project. A special PDF is available to show suggested access rights by typical user personas. See Clarity
: Track Tasks and To-Do Items.Clarity
: Task Assignment Access RightsTo manage task assignments, a user needs the following access rights:
Project - Task Management
Project - Task Management - All
Project - Edit Assigned Tasks
Project - Edit Assigned Tasks - All
To create an assignment, grant users the
Project - Edit Management
access right.Clarity
: Team Access RightsThe following Team rights are typically assigned to an application administrator. As the administrator, you can assign these access rights to an individual resource or a group.
- Team - View - AllAllows the user to view all existing teams.All of the following team rights include theTeam - View - Allglobal access right. To view the Team tiles, users also need theAdministration - Accessaccess right.
- Team - CreateAllows the user to create teams.
- Team - Edit - AllAllows the user to edit teams and their members. For example, the user can update team names, add or remove resources, and update resource allocation percentages.
- Team - Delete - AllAllows the user to delete teams not already allocated to an investment.
Clarity
: Staffing (Resource Management) Access Rights- Resource Forecast Rate - EditAllows users toResource Forecast Rate - Viewright.
- Resource Forecast Rate - ViewAllows users to
Clarity
: Roadmap Access Rights- Roadmap - AuthorAllows the user to view, edit, and delete the roadmap and manage roadmap-specific picklists. User can create views and edit or delete their own views. Also, allows user to create and manage scenarios within a roadmap.
- When you add a user as an author, the instance right is automatically granted to the user. When you remove a user as the author, the instance right isnotautomatically removed. The only way to revoke the right is for the system administrator to remove the right from the resource profile inClassic PPM.
- The system administrator can remove the instance right inClassic PPMfrom a user who is still an author on the roadmap. This is useful for reference purposes in case the user no longer needs access to the roadmap.
Type:Instance
- Roadmap - Author- AllAllows the user to view, edit, and delete all roadmaps, to manage roadmap-specific picklists, and to create, edit, and delete views for all roadmaps.
- Roadmap - CreateAllows the user to create roadmaps. The creator of the roadmap automatically becomes the author and can edit or delete the roadmap.
- Roadmap - EditAllows the user to view and edit a roadmap and manage the roadmap-specific picklists. User can create views and edit or delete their own views. Also, allows user to create and manage scenarios within a roadmap.Type:Instance
- Roadmap - Edit AllAllows the user to view and edit all roadmaps and manage roadmap-specific picklists. The user can view roadmaps in the timeline, board, or grid views. This access right also allows the user to create, edit, and delete their own views, and edit data in the roadmap grid.
- Roadmap - ViewAllows the user to view a roadmap and access the different views (timeline, board, and grid).Type:Instance
- Roadmap - View - AllAllows the user to view all roadmaps and access the different views (timeline, board, and grid). This access right also allows the user to create, edit, and delete their own views, and edit data in the roadmap grid.
- Roadmap - DeleteAllows the user to view and delete a roadmap.
- Roadmap - Delete AllAllows the user to view and delete all roadmaps and associated roadmap items.
Clarity
: Custom Investments Access Rights- Custom Investment Name - Budget Plan - Approve - AllAllows a resource to approve all the Custom Investment Name budget plans.
- Custom Investment Name - Budget Plan - Edit - AllAllows a resource to edit all the Custom Investment Name budget plans.
- Custom Investment Name - Budget Plan - View - AllAllows a resource to view all the Custom Investment Name budget plans.
- Custom Investment Name - Cost Plan - Edit - AllAllows a resource to edit all the Custom Investment Name cost plans.
- Custom Investment Name - Cost Plan - View - AllAllows a resource to view all the Custom Investment Name cost plans.
- Custom Investment Name - CreateAllows a resource to create Custom Investment objects.This includes the page navigation right.
- Custom Investment Name - Edit AllAllows a resource to create Custom Investment objects.This includes the page navigation right.
- Custom Investment Name - Financial Plan - Submit All for ApprovalAllows resource to submit all the Custom Investment Name financial plans for approval.
- Custom Investment Name - NavigateAllows resource to navigate to Custom Investment Name object pages.
- Custom Investment Name - Task Management - AllAllows user to create, update, and delete tasks for all Custom Investment Name objects they can view
- Custom Investment Name - View All - AllAllows resource to view all Custom Investment Name objects. This includes the page navigation right.
- Custom Investment Name - Xog AccessAllows user to import and export Custom Investment Name instances using the XML Open Gateway interface.
Clarity
: Hierarchies Access Rights- Hierarchy - CreateAllows user to create Hierarchy inClarity. The creator of the Hierarchy automatically becomes the Manager and can edit or delete the Hierarchy.
- Hierarchy - Delete - AllAllows user to view and delete all Hierarchies inClarity.
- Hierarchy - Edit - AllAllows user to view and edit all Hierarchies inClarity.
- Hierarchy - NavigateAllows user access to the Hierarchies pages inClarity. The user will only be able to view information for Hierarchies to which the user has access.
- Hierarchy - View - AllAllows user to view all Hierarchies inClarity.
Clarity
: Menu Links Access Rights- Menu Links - CreateAllows user to create new section and new links inClarity.
- Hierarchy - Delete - AllAllows user to view and delete all sections and Menu Links inClarity.
- Hierarchy - Edit - AllAllows user to edit all the sections and Menu Links inClarity.
- Hierarchy - NavigateAllows user to access to the Menu Links page inClarity.
- Hierarchy - View - AllAllows user to view all sections and Menu Links inClarity.