Task Profile Setup

A task profile defines the type of activities or tasks an administrator, a user, or a team of users can perform in the system.

Business Planning and Consolidation is installed with three administrative task profiles by default. You cannot modify these default profiles. You can, however, copy these profiles to create additional profiles for users and teams.

Administrator Task Profiles

The following default administrative task profiles permit a specific set of tasks:

SystemAdmin
PrimaryAdmin
SecondaryAdmin

A System Administrator (SystemAdmin), by default, has the following task rights:

Manage Environments
Manage Security
Use System When Offline

A Primary Administrator (PrimaryAdmin), by default, has the following task rights:

Manage Models
Manage Business Rules
Manage Dimensions
Manage Data Locks and Work Status
Manage Environment Status
Manage Drill Throughs
Manage Templates
Manage Audit
Use Offline Distribution
Edit Comments
Edit Book and Distribution templates
Publish Books
Manage Security

A Secondary Administrator (SecondaryAdmin), by default, has the following task rights:

Manage Dimensions
Edit content of Public Folder

If you want a user to perform administration tasks, you must assign them one of the predefined administrator roles. Without one of these roles, the user cannot perform any administrator tasks.

The following tables provide the tasks, organized by functional area of the system, that administrators can assign to users and teams.

Administration Task Profile Descriptions

The following table describes the available tasks in the Administration interface:

Task	Can be assigned to	Description
Manage Business Rules	Primary administrator	Can define business rules.
Manage Data Locks and Work Status	Primary administrator	Can define and edit work status codes.
Manage Dimensions	Primary and secondary administrators	Create, modify, process, and delete dimensions and members.
Manage Document Types	Any user or team	Can categorize collaboration postings, which is useful when filtering collaboration postings to see certain types. Subtypes can be managed by administrators or created by users as they post.
Manage Drill Throughs	Primary administrator	Can create and modify drill-through setup.
Manage Environment Status	Primary administrator	Can view environment status.
Manage Environments	System administrator	Can create and modify environments, and set environment parameters.
Manage Models	Primary administrator	Can create, modify, and delete models in an environment, make changes to dimensions and add dimensions, and optimize models.

Analysis and Collection Task Profile Descriptions

The following table describes the available tasks in the Analysis and Collection interface:

Task	Can be assigned to	Description
Manage Templates	Any user or team	Can access templates from the public folder, and restrict workbook options. A team member or team leader with this task can access and save templates to their respective team folder.
Run Drill Throughs	Any user or team	Can execute drill-throughs.
Use Input-ready Reports and Save Data	Any user or team	Can access the input-ready reports and send data. Can use spread, weight, and trend options. Controls submitting data from the web reports.

Audit Task Profile Descriptions

The following table describes the available tasks in the Audit interface:

Task	Can be assigned to	Description
Manage Audit	Any user or team	Can manage activity and data auditing.

Business Process Flows Task Profile Descriptions

The following table describes the available tasks in the Business Process Flows interface:

Task	Can be assigned to	Description
Manage BPFs	Any user or team	Can create, modify, and delete business process flows.
Use BPFs	Any user or team	Can execute business process flow tasks.

Collaboration Task Profile Descriptions

The following table describes the available tasks in the Collaboration interface:

Task	Can be assigned to	Description
Use Offline Distribution	Any user or team	Can use the Offline Distributor.
Use Offline Collection	Any user or team	This user or team collects changes to offline input forms and sends data to a database.

Comments Task Profile Descriptions

The following table describes the available tasks in the Comments interface:

Task	Can be assigned to	Description
Administer Comments	Any user or team	Can add, modify, and remove comments for all users.
Edit Comments	Any user or team	Can add, modify, and remove his or her own comments.

Consolidations Task Profile Descriptions

The following table describes the available tasks in the Consolidations interface:

Task	Can be assigned to	Description
Dismiss Blocking Controls	Any user or team	Can force failing controls to Dismissed status
Edit Ownership Manager	Any user or team	This user or team has write access to the Ownership Manager, but cannot run the ownership calculation routine.
Edit Controls definition	Any user or team	Can set up controls in Administration.
Reset Control Dismissal	Any user or team	Can reset a Dismissed control status to its previous status.
View Consolidation Monitor	Any user or team	Can access the Consolidation Monitor, but cannot perform any actions.
Run Consolidation Tasks	Any user or team	Can run currency translation and consolidations in the Consolidation Monitor.
Run Controls	Any user or team	Can access Controls Monitor and run control calculations.
Run Ownership Calculations	Any user or team	Can execute the ownership calculation.
View Controls	Any user or team	Can access Controls Monitor in read-only mode.
View Controls definition	Any user or team	Can read Control Manager definitions.
View Ownership Manager	Any user or team	Can access the landing page of the Ownership Manager.

Data Manager Task Profile Descriptions

The following table describes the available tasks in the Data Manager interface:

Task	Can be assigned to	Description
Run Admin Packages	Any user or team	Can run Admin packages within Data Manager.
Edit Packages	Any user or team	Can maintain packages within Data Manager.
Edit Transformation Files	Any user or team	Can maintain transformation files within Data Manager.
Edit Conversion Files	Any user or team	Can maintain conversion files within Data Manager.
Cancel Any User Packages	Any user or team	Can cancel user packages within Data Manager.
Edit Package Schedules for any user	Any user or team	Can change the package schedule for any user within Data Manager.
Run Packages	Any user or team	Can run packages within Data Manager.
Edit Package Links	Any user or team	Can maintain package links within Data Manager.
Upload Data	Any user or team	Can upload data within Data Manager.
Download Data	Any user or team	Can download data within Data Manager.

Folder Access Task Profile Descriptions

The following table describes the available tasks in the Folder Access interface:

Task	Can be assigned to	Description
Edit content of Public Folders	Secondary Admin	Can add and manage content in the public folder, including creating new folders. User also needs document type access rights, such as Edit Workspaces or Edit Reports.

Journal Task Profile Descriptions

The following table describes the available tasks in the Journal interface:

Task	Can be assigned to	Description
Edit Journals	Any user or team	Can create or modify journal entries.
Lock/Unlock Journals	Any user or team	Can lock and unlock journal entries
Manage Journals	Any user or team	Can manage journals as follows: Create and maintain journal templates Clear journal tables Create Journal
Post Journals	Any user or team	Can post journals.
View Journals	Any user or team	Can view journals.
Unpost Journals	Any user or team	Can unpost journal entries.
Reopen Journals	Any user or team	Can reopen journals.

Publish Task Profile Descriptions

The following table describes the available tasks in the Publish interface:

Task	Can be assigned to	Description
Edit Book and Distribution templates.	Primary Admin	Can create, edit, and save book and distribution templates.
Publish Books	Primary Admin	Can publish a book of reports.

System Reports Task Profile Descriptions

The following table describes the available tasks in the System Reports interface:

Task	Can be assigned to	Description
Run Audit Reports	Any user or team	Can run audit reports.
Run Comment Reports	Any user or team	Can run a comment report.
Run Security Reports	Any user or team	Can run security reports.
Run Work Status Reports	Any user or team	Can run a work status report.

System Security Task Profile Descriptions

The following table describes the available tasks in the System Security interface:

Task	Can be assigned to	Description
Use System When Offline	System Admin	Can log onto Planning and Consolidation when the status of an environment is Not Available.
Manage Security	System and primary administrators	Can manage users, task, and data access profiles. Caution We recommend that you restrict access of this task to a few privileged users.

Web Report Task Profile Descriptions

The following table describes the available tasks for web reports:

Task	Can be assigned to	Description
Edit Worksheet	Any user or team	Can create and update worksheets.
Edit Documents	Any user or team	User can use documents, can add, edit, and delete their own documents, and can access all documents shared with them.
Administer Documents	Primary Administrator	Can use documents, and can add, edit, and delete all documents.

Web Service Task Profile Descriptions

The following table describes the available tasks in the Web Service interface:

Task	Can be assigned to	Description
Access BPC from FIM and SSM	Any user or team	Can access Planning and Consolidation from the Financial Information Management and Strategy Management applications.

Work Status Task Profile Descriptions

The following table describes the available tasks in the Work Status interface:

Task	Can be assigned to	Description
Use Work Status	Any user or team	Can change the work status on a data region.

Adding a Task Profile

To create a new task profile in the Administration workspace, choose Start of the navigation path Security Next navigation step Task Profiles New End of the navigation path . Enter data as required.

Tips for Assigning Task Profiles

The number of task profiles administrators can assign to a user is not limited. However, we recommend that you do not assign multiple task profiles to users because it may cause you confusion in determining their ultimate access rights.

Task access security is cumulative, and tasks cannot be explicitly denied. As a result, assigning multiple task profiles can create a situation where users have access to tasks that you may not want them to have.
Administrators can assign multiple task profiles to a team. However, we recommend that you do not assign multiple task profiles to a team because it may cause you confusion in determining the ultimate access rights of that team.