Secure Project Rate Schedules

Project application administrators can use the Security Console to provide limited access to project rate schedules and lines.

You can:

Assign data security policies with the predefined user actions and data conditions, to either manage or view project rate schedules belonging to the common rates set or rate sets assigned to business unit or both to predefined or user-defined roles.
Use the predefined user actions of managing or viewing project rate schedules with user-defined conditions, in addition to the predefined data conditions.

Three data security policies are available that allow configuring data security on project rate schedules.

Business Object	Action	Description
Project Rate Schedules	Manage Project Rate Schedule Data	Provides the ability to manage project rate schedules for the reference data sets for authorized users.
Project Rate Schedules	View Project Rate Schedule Data	Provides the ability to view project rate schedules for the reference data sets for authorized users.
Reference Data Sets	Access Project Rate Set Data	Provides the ability to reference data sets for authorized users.

Note: There are no changes to existing functional privileges and job roles, both predefined and user-defined. The data security on project rate schedules applies only when you assign users with new data security policies along with requisite data access where applicable.

The data security on project rate schedules and rate sets will take precedence on any functional privileges available to users as part of their existing job roles. It affects the access to the Manage Rate Schedules page, and the associated File-Based Data Import, CSV Export and Import, and REST API.

Here are a few examples.

User	Job Role	Scenario	Behavior
Project User 1	Project application administrator	Assign data security policy on project rate schedules and rate sets with view privilege on project rate schedules belonging to the common rates set.	The user can only view project rate schedules and schedule lines belonging to the common rates set.
Project User 2	Project accountant	Assign data security policy on rate schedules and rate sets with manage privilege on project rate schedules of rate sets belonging to authorized business units.	The user can create, edit, or delete project rate schedules and schedule lines of rate sets belonging to the authorized business units.

Creating Data Security Policy

You can create data security policies for rate schedules belonging to the common rate set, rate sets assigned to business units, or both, and any user-defined conditions. Here we explain how you create the data security policy for a rate set assigned to business units.

Navigate to Tools > Security Console.
Click Create Role.
On the Create Role page, enter the basic information such as role name, code, and category.
Click Next.
Click Add Function Security Policy.
In the Add Function Security Policy window, search for Manage Project Rate Schedule security policy.
Select the security policy row from the Search Result and click Add Privilege to Role.
Click Next.

Click Create Data Security Policy to create the data security policy for project rate schedule. On the Create Data Security Policy window, click OK after you enter the following data.

Field	Description
Policy Name	Select the policy name. For example, Manage BU Rate Schedules.
Database Resource	Search and select for a resource. For example, PJF_RATE_SCHEDULES_VL.
Data Set	Select by instance set. You can select conditions using this option.
Condition Name	Select the condition associated to business units.
Actions	Select the action you want to assign to the role.

Similarly, create a data security policy for rate sets.

Field	Description
Policy Name	Select a policy name. For example, BU Rate Sets.
Database Resource	Search and select SetID Set.
Data Set	Select by instance set. You can select conditions using this option.
Condition Name	Select the same condition selected for project rate schedules.
Actions	Select the action. For example, Access Project Rate Set Data

Click Next.
Click Next.
Click Save and Close.

Assigning Data Security Policy to a User

After you create the data security policy, assign the policy to a user. Here we will assign it to an existing user.

Navigate to Tools > Security Console.
On the Roles page, click Users to assign the newly created role to an existing user with the project accountant role.
On the User Accounts page, search for the existing project accountant user. In the Search Results section, click the Display Name link for the user.
On the User Account Details page, click Edit.
On the Edit User Account page, click Add Role.
On the Add Role Membership window, search the role you just created and click Add Role Membership.
Click Done.
Click Save and Close.
Click Done.

Providing Data Access

Now that you have created the data security policy and assigned it to a user, you can provide the rate schedule access for specific business units.

In the Setup and Maintenance work area, search for the Manage Business Unit Data Access for Users task.
Click the Manage Business Unit Data Access for Users link.
On the Manage Data Access for Users page, click Create.

On the Create Data Access for Users window, enter the following details.

Field	Description
User Name	Select the user to whom you assigned the newly created role.
Role	Select the newly created role.
Security Context	Select the value as Business unit.
Security Context Value	Name of your business unit.

Click Save and Close.
Click Done.
Click Done. You can verify that the user can now access project rate schedule based on the assigned data security policy.

Tip:

You must configure the same data security conditions to rate sets as the data security policy conditions configured for the project rate schedules. Otherwise, users with the Manage Rate Schedules privilege won't be able to create a new project rate schedule successfully.
It isn't mandatory to configure the data security on rate sets for users assigned with view privileges on project rate schedules.