Application roles

The predefined, application roles are functionality-driven. Global permissions and OLAP permissions are defined. Use the #TABACC cube to control cube access. Use the #BPDNAV cube to manage permissions for navigation items.

If a user is assigned to multiple roles, access to already enabled navigation items within those roles can be denied only through use of custom roles.

In addition, built-in roles, such as, AdministratorRole, DesignerRole, MasterRole, ViewRole can be used. You can use these roles in your custom applications but do not assign them to Infor EPM business applications. New data roles can be added.
Note: Adding new application roles is not supported.

Users and Groups can be assigned to one or more application roles through EPM Administration.

These application roles are specific to the Infor EPM business applications application:

  • Business Modeling Administrator
  • CashFlow Planner
  • Everyone
  • Finance DP Requester
  • Finance Modeler
  • Finance Planner
  • Finance Read-Only
  • Global Configuration Modeler
  • Subplan Modeler
  • Workflow Modeler
  • Custom roles
Note: Users that are assigned both the planner and the approver roles for the same task are not supported.

Business Modeling Administrator

Users of this application role can set up, maintain, and configure the business model. These options are accessible:

  • Maintaining of Business objects such as integration, upload, and manual edits including settings
  • Importing and exporting values
  • Publishing to OLAP

Access to destructive operations throughout the business applications is restricted to users who have the Business Modeling Administrator role. For all other users, these operations are forbidden:

  • Reducing the initial calendar definition by changing the start year or the end year value
  • Deactivation of the consolidation core settings for segmentation
  • Deactivation of the consolidation core settings for schedules
  • Using the Replace option when importing or uploading business object records
  • Deletion of published business object records
  • Conversion of published base (N) elements to consolidated (C) elements, manually or through imports or uploads
  • Deactivation of published currencies
  • Deletion of published sub plans
  • Deletion of published data storage elements (sub plan)
  • Deletion of published parameter elements (sub plan)
  • Deletion of published custom business objects
  • Importing a business model when the current model is already published
  • Resetting a business model when the current model is already published

CashFlow Planner

Users of this application role get access to planning capabilities of the cash flow. These options are accessible:

  • Configuration of cash flow accounts
  • Initiating cash flow transfer
  • Manual data entry for cash flow
  • View access to cash flow reports

Everyone

The Everyone role does not provide access to view or edit applications and was created for technical reasons.
Note: Do not assign users to this application role.

Finance DP Requester

Users of this application role get access to request decision packages for finance.

Finance Modeler

Users of this application role get access to configuration capabilities of the finance modules. These options are accessible:

  • Application configuration such as maintaining system accounts, translations
  • Business configuration and maintenance of finance-specific features, such as currency exchange, phasing methods, workflow, workbook wizard
  • Access to finance modules such as Balance Sheet, Profit and Loss, or Forecast
  • Configuration of asset categories for capital planning
  • Creating requests for finance decision packages
  • Access to Business Modeling

Finance Planner

Users of this application role get access to finance planning capabilities. These options are accessible:

  • Data entries for budget and forecast that are based on assigned tasks including functions such as splashing, phasing, or copying values
  • Access to finance analysis reports, such as Profit and Loss, Balance Sheet, or Forecast

Finance Read-Only

Users of this application role get read-only access to finance modules. These options are accessible:

  • Read-only access to reports in finance, such as Profit and Loss, Balance Sheet, and Forecast
  • Read-only access to cash flow reports
  • Creating requests for finance decision packages
Note: Write permission is required to open a task. You cannot assign a task to a user who has only the Finance Read Only role.

Global Configuration Modeler

Users of this application role get global access to all configuration capabilities of the application modules. These options are accessible:

  • Application configuration including activation, data and structure uploads through UI, translations, global sign definition
  • Business configuration including general, configuration set-specific, and subplan configuration
  • Creation and maintenance of Decision Packages, including creation of Decision Package workbooks through workbook wizard
  • Access to Business Modeling

Subplan Modeler

Users of this application role have permissions for subplan configuration. These options are accessible:

  • Access to Business Modeling
  • Access to the Account Activation for Sub Plan page through Sub Plan Business Settings

Workflow Modeler

Users of this application role have permissions for workflow configuration. These options are accessible:

  • Access to workflow configuration pages
  • Configuring workflows and assigning tasks to users and groups
  • Access to the Workflow Overview report

Custom roles

By default, users with custom roles do not have permissions for standard navigation items but navigation permissions can be enabled individually in the #BPDNAV cube.

These custom roles are available:

  • Custom Read

    Users of this application role have read permissions in OLAP.

  • Custom Write

    Users of this application role have write permissions in OLAP.

Note: For modeler roles, the built-in system ModelerRole role can be used for the same purposes as the custom roles.