Overview

While creating and updating plans, besides the cost center owner, other people may be delegated to help update the labor plan in IT Planning. However, the labor expense tab can contains sensitive data may need to be hidden from the delegated or unauthorized users. These sensitive labor data may include an individual's Base Comp, Labor Rate, labor financials, and other custom dimensions.  

This document will provide instructions on how to

• identify sensitive labor data
• grant sensitive labor data to users

By default, the user will have access to identified sensitive labor data and the administrator will need to be revoke the user's access to the sensitive labor data.

Prerequisite

To configure the columns or dimensions as sensitive or to grant/revoke access to sensitive labor data, you will need to log in as Administrator with access to the Reference data. 

Identify Sensitive Labor Columns

Sensitive labor columns are identified from the Labor Reference page.

1. Navigate to Reference Data.
2. Select Labor.
3. From Sensitive column, place a check next to any columns to mark as sensitive data.
   A check next to the column indicates that the column is a sensitive data and the access to the column will be restricted to users.
4. Click Save.

Grant Access to Sensitive Labor Data to User

Access to view sensitive labor data is granted or revoked from the Cost Object Permissions Reference page. The permission is specific to the specified cost object. 

This allows for a user to be able to view sensitive labor data for specific cost objects but not for other cost objects. Until the user is granted access to sensitive labor data, the user will NOT be able to see the sensitive labor columns from the Labor tab nor the generated labor line items from the Summary tab.

1. Navigate to Reference Data.
2. Select Cost Object Permissions.
3. From Can View Sensitive Columns column, place a check to grant the user access to view all labor columns to mark as sensitive data from the Labor tab for the cost object.
4. From Can View Sensitive Financials column, place a check to grant the user access to view the generated labor line items from the Summary tab for the cost object.

Related Impact

Labor Tab

The user can only view columns or dimensions the user have permission to view. The user will not be able to view any sensitive labor columns or dimensions the user does not have access to for the cost object the user is viewing.

Summary Tab

The user can only view generated labor line items the user has permission to view. The user will not be able to view any generated labor line items the user does not have access to for the cost object the user is viewing.

Show/Hide Columns, Filters, Saved Layout

Only the columns or dimensions that the user can see will be listed in the list of possible columns to display in the layout or in the filter.

Charts, KPIs

Generated labor financials are excluded from the charts and KPIs if the user does not have access to view the generated labor financials.

SSR

Only the columns or dimensions that the user can see will be listed in the list of possible dimensions to display in SSR.

Export Labor Data

Only the data that the user can see can be exported. User will not be able to export sensitive labor data.

Import Labor Data

User can only import data that the user can view. User cannot import sensitive labor data that the user cannot view.