Workspace Security Privileges Definitions

When creating a permission set, use the following definitions to determine the functionality each privilege controls and other privileges that may also be required. Selecting one privilege may automatically select other privileges if they are required for the original privilege to function properly. These other privilege selections cannot be changed without affecting the selection of the original privilege. Any privilege requirements are noted in the definition.

Configuration

Analysis Views

Enables users to add, edit, and delete Analysis Views.

If you select the add, edit, or delete privileges, all privileges are automatically selected.

Baseline Categories

Enables users to add, edit, and delete baseline categories.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Calendars

Enables users to add, edit, and delete workspace-level calendars. To add or edit a holiday list, both Add and Edit must be enabled.

If Add is selected, Edit is also selected and cannot be changed. If Delete is selected, Add and Edit are also selected and cannot be changed.

Applies to: Workspace-level Calendars dictionary

CBS

Enables users to add, edit, and delete a workspace CBS.

Charts

Enables users to add, edit, and delete charts.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed.

Codes

Enables users to add, edit, and delete codes and code values data. To edit color associations from the workspace Codes dictionary, the edit privilege must be enabled.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed.

Configured Fields

Enables users to add, edit, and delete configured fields.

If you select the add privilege, edit is automatically selected. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Cost Categories

Enables users to add, edit, or delete cost categories.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed.

Custom Log Types

Enables users to add, edit, or delete custom log types in the workspace Summary & Settings. Users with the Add privilege can also assign a custom log type from a parent workspace or duplicate a custom log type. Users with the Delete privilege can also remove custom log assignments. Users with the Edit privilege can also apply a custom log type to programs and projects and assign and remove configured fields and codes.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Currencies

Enables users to add, edit, and delete currencies.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed.

Curve Profiles

Enables users to add, edit, and delete a curve profile.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed.

Evaluation Categories

Enables users to add, edit, or delete evaluation categories.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Field Labels

Enables users to edit field labels.

Folder Templates

Enables users to add, edit, and delete folder templates.

If you select the add, edit, or delete privileges, all privileges are automatically selected.

Forms

Enables users to add, edit, delete, or view forms.

If you select the add privilege, edit, delete, and view are automatically selected. If you select the edit privilege, the view privilege is automatically selected. If you select the delete privilege, add, edit, and view are automatically selected.

Locations

Enables users to add, edit, and delete locations data.

You must assign all privileges.

Measures

Enables users to add, edit, and delete measures.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Notebook Topics

Enables users to add, edit, and delete Notebook Topics.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Reasons

Enables users to add, edit, and delete reasons.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Report Cycles

Enables users to add, edit, and delete reporting cycles.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Resource Costs/Financials

Enables users to edit and view workspace-level rates on a resource owned by the current workspace or the parent workspace.

If Edit is selected, the View Resource Costs/Financials and Edit Resources privileges are also selected and cannot be changed.

Applies to: Resources

Resources

Enables users to add, edit, and delete workspace-level resources. The Add privilege also enables users to assign a resource from the parent workspace to the current workspace. To promote a resource to the parent workspace, the Add Resource privilege for the parent workspace must be enabled. To assign roles to a resource, the Edit Roles privilege must also be selected. To view and edit workspace rates on a resource owned by the current workspace or the parent workspace, the View and Edit privileges for Resource Costs/Financials must also be selected.

If Add is selected, Edit is also selected and cannot be changed. If Delete is selected, the Add Resources, Edit Resources, Edit Resource Costs/Financials and View Resource Costs/Financials privileges are also selected and cannot be changed.

Applies to: Resources

Restricted Configured Fields

Enables users to edit workspace-level restricted configured fields.

Applies to: Projects, Portfolios, and Programs.

Risk Matrix Templates

Enables users to add, edit, and delete risk matrices.

You must assign all security privileges.

Risk Threshold Templates

Enables users to add, edit, and delete risk thresholds.

You must assign all security privileges.

Role Cost/Financials

Enables users to edit and view workspace-level rates on a role owned by the current workspace or the parent workspace.

If Edit is selected, the View Role Costs/Financials and Edit Roles privileges are also selected and cannot be changed.

Applies to: Resources

Roles

Enables users to add, edit, and delete workspace-level roles. The Add privilege also enables users to assign a role from the parent workspace to the current workspace. To promote a role to the parent workspace, the Add Role privilege for the parent workspace must be enabled. To assign resources to a role, the Edit Resources privilege must also be selected. To view and edit workspace rates on a role owned by the current workspace or the parent workspace, the View and Edit privileges for Role Costs/Financials must also be selected.

If Add is selected, Edit is also selected and cannot be changed. If Delete is selected, the Add Roles, Edit Roles, Edit Role Costs/Financials and View Role Costs/Financials privileges are also selected and cannot be changed.

Applies to: Resources

Rules of Credit

Enables users to add, edit, and delete rules of credit.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view privileges are automatically selected and cannot be changed.

Set Tasks Color Settings

Enables users to set the Color Tasks by attribute in Workspace Settings.

Start Workflows

Enables users to start workflow instances manually from the Start Workflow page.

If the Start Workflows privilege is enabled, the Workflows and Forms view privilege is automatically selected and cannot be removed.

Strategy Types

Enables users to add, edit, or delete strategy types.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit are automatically selected and cannot be changed.

Units of Measure

Enables users to add, edit, and delete units of measure.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed.

Views

Enables users to add, edit, and delete workspace views and filters.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed.

Workflow Configuration

Enables users to add, edit, delete, or view workflow configurations.

Workflow Design

Enables users to add, edit, delete, or view workflow designs.

Workspaces

Enables users to add, edit, and delete workspace hierarchy nodes, add or update workspace logo, and edit workspace ID, name, description, and workspace currency (if costs do not exist). Workspace nodes at the highest level (root) must be added by an application administrator. Users with the delete privilege are able to delete a workspace and move all data to the parent workspace; only an application administrator can delete a workspace and all its data.

If you select the add privilege, edit is automatically selected. If you select the delete privilege, add and edit are automatically selected.

Workspace Dashboards

Enables users to add, edit, and delete dashboards at the workspace level.

You must assign all security privileges.

General

Allow Project Creation to Copy from Existing

Enables users to allow project creation to copy from an existing project.

Funding

Enables users to add, edit, delete, and view funds.

If you select the add privilege, edit and view are automatically selected and cannot be changed. If you select the delete privilege, add, edit, and view are automatically selected and cannot be changed. If you select the add, edit, or delete privilege, the edit and view privilege for Funding Costs/Financials are automatically selected.

Funding Costs/Financials

Enables users to edit and view funds and financial data.

If you select the edit privilege, view is automatically selected and cannot be changed. If you select the edit or view privilege, the view privilege for Funding is automatically selected and cannot be changed.

Ideas

Enables users to add and submit ideas in the workspace.

Import Project

Enables users to import XML or XER files from P6 EPPM and Microsoft Project.

Import Project Excel

Enables users to import Microsoft Excel (.xls or .xlsx) files for creating projects.

Move Project

Enables users to move a project from one workspace to another workspace. When you select Enable, the Project's Add privilege is automatically selected and cannot be changed. You must have this privilege in both the origin and destination workspace to have complete access to shared data during the move process.

Move Workspace

Enables users to move a workspace from one workspace to another workspace. You must have this privilege in both the selected and target workspaces to move the workspace. When you select Enable, the workspace's Add and Edit privilege is automatically selected.

Portfolios

Enables users to add portfolios.

Print Layouts

Enables users to add print layouts.

Programs

Enables users to add programs to the workspace.

Project Proposals

Enables users to add project proposals from the Projects page or as part of an idea approval workflow. Only users with the Portfolio and Capital Planning Cloud Service license can add project proposals.

Applies to: Accept Idea workflow action, Project Inventory

Project Template

Enables users to add project templates.

Projects

Enables users to add projects.

Promote Report to Workspace

Enables users to promote a user or project report to a workspace report.

Recalculate Workspace Costs

Enables users to recalculate workspace costs when editing cost information.

Strategies

Enables users to add, edit, or delete strategies.

Workspace Aggregate Cost Data

Enables users to view aggregate cost data for all projects and child workspaces within the workspace. If users also have the Project Costs/Financials privilege, they can access CBS costs in the project from the workspace Cost Sheet page.

Workspace Cost Sheet

Enables users to add and edit the workspace cost sheet.

If you select the edit privilege, the edit privilege for CBS is automatically selected and cannot be changed.

Users and Security

Permission Sets

Enables users to add, edit, and delete global, workspace, project, portfolio, file, and report permission sets.

You must assign all security privileges.

User Groups

Enables users to add, edit, and delete user groups for the workspace. Users with this privilege can edit the user groups from the Workspace Summary & Settings or from the User Groups page in Global Admin.

If you select the add privilege, edit is automatically selected and cannot be changed. If you select the delete privilege, add and edit, are automatically selected and cannot be changed.

Next: Project Permission Sets