This section explains how to grant complete or conditional access to measures using the security role.
Note: | Users who are Result Collectors or Target Setters can enter results or targets, regardless of permissions. |
To assign measure permissions to security roles:
On the Security Role Setup page, right-click Measure Permission and select Add.
In Permission Name, enter a name for the set of measure permissions.
To grant or deny access to individual measures or measures in a domain, assign permissions as follows:
To grant access to all measures in a domain that you choose, select Grant access to all measures in Domains.
To grant access to measures in the domain of the employee which the user is associated, select Include Employee Domain.
To grant access to measures in levels above and below a specified domain, select Domain Implicit Access.
To grant access to only a specific measure, select Grant access to this measure.
To grant access to all measures expect one measure that you choose, select Deny access to this measure.
To deny access to measures in a particular domain that you choose, select Deny access to measures in domains.
To deny access to measures unless users meets certain criteria, select Deny access to all measures and assign a conditional permission as follows:
Unless measure owner—Grant access only to measures that are owned by the user.
Unless measure from accessible scorecard—Grant access to measures on scorecards to which they user can access