New Access Security aka Kim Role - Account Data Viewer

Overview

We will be removing Access Security in favor of using KIM Roles and Permissions to control access to Balance Lookups and Documents. 

Affected Roles

• KFS-SYS, Account Data Viewer - newly created role that will be used to control organizational and account access. The role is qualified by chart and Organization or Account, and descends the hierarchy.  To preserve current base behavior role 32 has been assigned to this role qualified with the top level chart and organization. 
• Fiscal Officer and Account Supervisor - the new permissions have also been added to the Fiscal Officer and Account Supervisor roles so that users associated with accounts can access balance lookups. 
• Account Manager, a new role has been added to allow Account Managers to access balance lookups for accounts they are associated with.

Balance Lookups

To control access to General Ledger and Labor Ledger Balances, the following permissions were created and assigned to the new role.

The new Permissions assigned to Account Data Viewer, Fiscal Officer, Account Supervisor and Account Manager are: 

• Unmask Record Open Encumbrances
• Unmask Record General Ledger Balance
• Unmask Record Employee Funding
• Unmask Record General Ledger Entry
• Unmask Record Labor Ledger Pending Entry
• Unmask Record Current Account Balance
• Unmask Record Labor Ledger Entry
• Unmask Record Cash Balance
• Unmask Record General Ledger Pending Entry
• Unmask Record Balances by Consolidation
• Unmask Record Available Balance
• Unmask Record Labor Ledger View
• Unmask Record Balances By Level
• Unmask Record Balances By Object
• Unmask Record Labor Ledger Lookup for Salary Expense Transfer
• Unmask Record Labor Ledger Lookup for Benefit Expense Transfer
• Unmask Record Labor Ledger View for Effort Certification
• Unmask Record General Ledger Transfer Entry - needs to be created manually
• Unmask Record Asset Processing General Ledger Entry - needs to be created manually
   

Documents

Restricting access to documents will be controlled by using the Open Document permission. The Open Document permission has been changed to allow qualification by Chart and Organization or Account. Open Document KFS can be copied to create finer grained permissions. Requisition initiators will be able to open related Purchase Order, Payment Requests and Credit Memos.