IBM Apptio

 View Only

 Data Security for the Labor Tab

Jump to  Best Answer
  • ApptioPlanning(ITP/ITFMF)
Venkateswara Rao Veerapaneni's profile image
Venkateswara Rao Veerapaneni posted 10/26/22 11:57 AM
Hi Team, We implemented the security based on Cost center owner in the ITP, Our security works like this currently, CC owner can view all the other CC information but not able to edit the data except their cost center. But our new ask is , it has to work same away for all other tabs except Labor Tab, For Labor tab it should show the data for only for their cost center.
#ApptioPlanning(ITP/ITFMF)
Venkateswara Rao Veerapaneni's profile image
Venkateswara Rao Veerapaneni  Best Answer
Hi Deba, t will not satify my used case. We already have sensitivity data for fields. I will submit idea for the same.
#ApptioPlanning(ITP/ITFMF)
Shana Cunha's profile image
Shana Cunha

Hi Venkateswara, 

Let me have a chat to the appropriate team internally and get back to you!

Thanks for your patience!

Shana


#ApptioPlanning(ITP/ITFMF)
Jonas Koch's profile image
Jonas Koch
Hi Venkateswara, 

we had the same use case (everyone should be able to view all cost centers, but only edit their own ).

Our solution was: 
1) Define sensitive data for the labor tab
2) In the cost object permissions give each manager edit rights to their own cost centers, with the "view sensitive data" options set to "TRUE". 
3) Additionally give each manager a "View all" permission with the sensitive data option set to "FALSE"

the last step is important, as without it everyone could still see everything. 
We are also not using the "Enforce View Permissions" feature, so maybe there's an easier way to do this. 

Hope this helps, 
Jonas
#ApptioPlanning(ITP/ITFMF)
Debbie Hagen's profile image
Debbie Hagen
@Venkateswara Rao Veerapaneni,
I've asked some of my ITP experts to take a look and see if they can provide additional guidance on this one.  Shana and I are trying to track down an Apptio answer for you on this to see if there is anything easier.

In the meantime, thanks @Jonas Koch for the suggestion!​
#ApptioPlanning(ITP/ITFMF)
Venkateswara Rao Veerapaneni's profile image
Venkateswara Rao Veerapaneni
Thank You!! Debra. I really appreciate your help on this. Wait for your feedback from the team. it's critical now for us.
#ApptioPlanning(ITP/ITFMF)
Debbie Hagen's profile image
Debbie Hagen
Hello @Venkateswara Rao Veerapaneni,

It sounds like what your asking for is to have a CC Owner who can access the whole budget, but can only edit data for your cost center.  Except that on the Labor tab you want to show the data only for that users specific cost center.​   Perhaps to prevent cost center owners to see other CCO's sensitive information like salary, employee name, etc?  Is that an accurate description of your use case? 

If so, we don't support that specific scenario. Jonas' suggestion is a good one but I'm not sure if it fully supports your use case.  One possible option is to use the Sensitive Data Hiding feature in the Labor Tab.  So the CCO's will see all of the labor data but the columns marked as sensitive will be hidden.  Does this solution work for your use case?
Kind regards,
Debbie​
#ApptioPlanning(ITP/ITFMF)
Venkateswara Rao Veerapaneni's profile image
Venkateswara Rao Veerapaneni
Thank You!! Debra. I will submit idea for my used case.
#ApptioPlanning(ITP/ITFMF)
Debbie Hagen's profile image
Debbie Hagen
Does the sensitive data hiding solution work for you?
#ApptioPlanning(ITP/ITFMF)
Apptio Community Member's profile image
Apptio Community Member
Just to make sure I'm understanding correctly.....

Bob works in cost center 1000 and has edit access for all areas in cost center 1000.  You want Bob to be able to see cost centers 1001, 1002, and 1003 (except for sensitive labor data) and not be able to edit anything in cost centers 1001, 1002, and 1003.  Is this correct?
#ApptioPlanning(ITP/ITFMF)
Venkateswara Rao Veerapaneni's profile image
Venkateswara Rao Veerapaneni
That is correct Matthew.
#ApptioPlanning(ITP/ITFMF)