How do I create roles and configure permissions?
Business roles are created in Planning Business Modeler to control access to business data for PerformancePoint Add-in for Excel users. A business role applies only to the model site that it is created in.
Prerequisites
You must belong to the Data Administrator or Modeler role to create a business role and configure role permissions. You must belong to the User Administrator role to manage role membership and customize permissions for individual users.
Before User Administrators can add a user to a role, the user must be added to the Planning Server system. Planning Server users appear in the Add or Remove Users dialog box that opens when you click the Add or Remove Users from This Business Role link in the Security and Roles workspace. (Users can be added to the system from the Planning Administration Console.)
Review the guidelines in Best practices for business roles for tips and other information that may apply when you configure roles or implement your security model.
Creating a business role
Perform the steps in the following table to track your progress. The order of the following tasks may vary. Except where noted, the tasks apply to a member of the Data Administrator or Modeler role.
Step
Task
Related topic
1
Design the role: Identify the users who will belong to the role, the business data that they require access to, and the Read or Write access that they require.
Not applicable
2
Determine the appropriate default permissions level, the explicit permissions to member sets and members, and the customized user permissions that the role requires. Be aware that user permissions cannot give more access than that which is defined for the role.
About permissions for business roles
3
Identify the models that contain the member sets that the role will access. If any one of the models is linked to an assumption model, review the security implications.
How do I use an assumption model?
4
Create the role and select the default permissions.
5
Specify the permissions to member sets and members.
.gif "Note")
Note:
To access business data, business roles must grant Read permissions to at least one member in every member set in models that the role can access. For more information about this requirement, see Best practices for business roles.
Edit member set permissions for a business role
6
Add users to the role. (User Administrator)
Add users to or remove users from a business role
7
Specify custom user permissions. (User Administrator)
Edit user permissions in a business role
8
Enable access to one or more models.
Enable access to a model for a business role
9
To enable writeback, add the role or individual users as contributors to appropriate assignments. The ability to perform writeback in PerformancePoint Add-in for Excel requires Contributor status in an assignment and Write access in a business role.
See the "Assign forms to a user for data submission" topic in the product help.