Budgeting and Planning application roles
Application roles define the pages that a user can view, the data that a user can access, and the actions that a user can perform.
Standard application roles define the permissions required to perform specific tasks and access reports. You can manage user and group assignments for application roles through EPM Administration.
These application roles are provided with the Infor EPM business applications:
- Business Modeling Administrator
- CashFlow Planner
- Everyone
- Finance DP Requester
- Finance Modeler
- Finance Planner
- Finance Read-Only
- Global Configuration Modeler
- Subplan Modeler
- Workflow Modeler
- Custom Read
- Custom Write
Best practices for managing application roles
This section summarizes recommended guidelines for managing application roles.
- Manage application role assignments using Infor OS security roles to centralize access across all Infor applications.
For more information, see Using Infor OS security roles to grant access to EPM applications and Standard security roles for EPM business applications.
- Do not create security roles for Infor EPM data roles. Infor EPM requires a large number of data roles.
For more information, see Role-based Security.
- Use the #TABACC cube to control cube access.
- Add data roles to restrict access to business object records.
Limitations and restrictions in application roles
This section describes supported constraints and known restrictions in application roles.
- Assigning to the same user both the planner and approver roles for the same task is not supported.
- Adding new application roles is not supported.
- Using the built‑in roles such as AdministratorRole, DesignerRole, MasterRole, ViewRole, and ModelerRole is not recommended.
Managing the navigation access
You can manage access to reports and other screens in the navigation.
The Navigation dimension (BPDNAVIGATION) controls navigation access. You can secure and maintain the navigation using the #BPDNAV access cube.
- Select .
- In the Data Source field, select DEPMAPPS-EPM.
- In the Access Cube field, select the Navigation Permissions access cube.
If a user is assigned to multiple roles, the role permissions are cumulative.
Business Modeling Administrator
Users of this application role can set up, maintain, and configure the business model. These options are accessible:
- Maintaining business objects by loading them from integration tables or editing them manually, including their settings
- Importing and exporting values
- Publishing to OLAP
Access to destructive operations throughout the business applications is restricted to users who have the Business Modeling Administrator role. For all other users, these operations are forbidden:
- Reducing the initial calendar definition by changing the start year or the end year value
- Deactivation of the consolidation core settings for segmentation
- Deactivation of the consolidation core settings for schedules
- Using the Replace option when importing or uploading business object records
- Deletion of published business object records
- Conversion of published base (N) elements to consolidated (C) elements, manually or through imports or uploads
- Deactivation of published currencies
- Deletion of published sub plans
- Deletion of published data storage elements (sub plan)
- Deletion of published parameter elements (sub plan)
- Deletion of published custom business objects
- Importing a business model when the current model is already published
- Resetting a business model when the current model is already published
CashFlow Planner
Users of this application role get access to planning capabilities of the cash flow. These options are accessible:
- Configuration of cash flow accounts
- Initiating cash flow transfer
- Manual data entry for cash flow
- View access to cash flow reports
Everyone
Finance DP Requester
Users of this application role get access to request decision packages for finance.
Finance Modeler
Users of this application role get access to configuration capabilities of the finance modules. These options are accessible:
- Application configuration such as maintaining system accounts, translations
- Business configuration and maintenance of finance-specific features, such as currency exchange, phasing methods, workflow, workbook wizard
- Access to finance modules such as Balance Sheet, Profit and Loss, or Forecast
- Configuration of asset categories for capital planning
- Creating requests for finance decision packages
- Access to Business Modeling
Finance Planner
Users of this application role get access to finance planning capabilities. These options are accessible:
- Data entries for budget and forecast that are based on assigned tasks including functions such as splashing, phasing, or copying values
- Access to finance analysis reports, such as Profit and Loss, Balance Sheet, or Forecast
Finance Read-Only
Users of this application role get read-only access to finance modules. These options are accessible:
- Read-only access to reports in finance, such as Profit and Loss, Balance Sheet, and Forecast
- Read-only access to cash flow reports
- Creating requests for finance decision packages
Global Configuration Modeler
Users of this application role get global access to all configuration capabilities of the application modules. These options are accessible:
- Application configuration including activation, data and structure uploads through user interface, translations, global sign definition
- Business configuration including general, configuration set-specific, and subplan configuration
- Creation and maintenance of Decision Packages, including creation of Decision Package workbooks through workbook wizard
- Access to Business Modeling
Subplan Modeler
Users of this application role have permissions for subplan configuration. These options are accessible:
- Access to Business Modeling
- Access to the Account Activation for Sub Plan page through
Workflow Modeler
Users of this application role have permissions for workflow configuration. These options are accessible:
- Access to workflow configuration pages
- Configuring workflows and assigning tasks to users and groups
- Access to the Workflow Overview report
Custom roles
By default, users with custom roles do not have permissions for standard navigation items but navigation permissions can be enabled individually in the #BPDNAV cube.
These custom roles are available:
- Custom Read
Users of this application role have read permissions in OLAP.
- Custom Write
Users of this application role have write permissions in OLAP.