Access and Security
Below are the steps you will need to take to gain access to transact within CPBS or add/view SIP values. The Brio-Hyperion Budget datamarts require a separate security setup to run reports, the details are below.
Access and Security to CPBS
Access to CPBS is read/write and is granted by the unit data access authorizer, who submits a request to the Budget Office (Jean Palmer, jlp12@cornell.edu) CPBS access is based on the assignment of a VMID (virtual machine ID). VMIDs are password protected and may give the user access to other legacy systems in addition to CPBS (if so configured).
To receive a VMID you should send a request to cornellc-admin@cornell.edu and cc: your supervisor/manager in the department. The request should include: user's full name, netid, the 3 digit account (department number) , and an explanation of what they need the VMID for ie; CPBS. CIT will verify with the department contact that the user is indeed with that department and that a VMID should be issued, the VMID will then be set up. A reply will be sent to the e-mailer, giving the VMID, so that the process to establish security can begin. The initial password for the VMID will be campus mailed to the user.
If you have forgotten your password, you may get it reset by going to the CIT HelpDesk (CCC Room 119) or emailing a request to cornellc-admin@cornell.edu. If requesting a new password via email, a new one will be sent to you via confidential US mail or campus mail.
Users are assigned to one or more of three data access roles within CPBS based on the recommendation of the authorizer:
- Financial Planning - Gives the user access to the financial planning module of CPBS. The user cannot access a Workforce Planning record or a Salary Improvement Program (SIP) record if they only have this role.
- Workforce Planning - Gives the user access to the Workforce Planning module of CPBS. The user cannot access SIP records or Financial Planning modules if they only have this role.
- SIP - Gives the user access to SIP modules. SIP is a special subset of Workforce Planning information that enables the user to assign salary improvement awards.
Because CPBS deals with both HR/Payroll and accounting information, it relies on both organizational structures to determine what departments a user can see.
The Financial Planning module of CPBS is secured by the three digit department code and four digit subledger in the accounting general ledger. Thus it is possible to secure access to Financial Planning to a single account or department, multiple accounts or departments or entire organizations.
Workforce Planning access is governed by the HR/Payroll department tree and is secured at the lowest level of that departmental tree. As a result, it is not possible to limit a user's access to only one position or person in Workforce Planning. A user who can access an HR department in Workforce Planning can see all of the records in that department. User access to multiple departments and/or entire organizations can be supported.
User access to SIP information will also be governed by the HR/Payroll department tree structure. The departments to which a user has SIP access can be the same as those for which Workforce Planning access has been granted, or they can be different. For example, a user in a college dean's office might have access to all of the college's departments in Workforce Planning but have limited departmental access for SIP.
This description of CPBS security applies whether the user enters the system through the legacy (3270) interface or the web interface.
Access and Security to the Brio-Hyperion Budget Datamarts
Access to the two budget data marts (Cornell Brio-Hyperion Home Page) is granted by the unit data access authorizer. With the exception of access to SIP data, data mart users do not have to be CPBS users. Data mart access is governed by NetID rather than VMID as in CPBS. There are two budget data marts and they are governed by different security roles and access rules:
Accounting Budget Data Mart
This data mart is located within the Accounting Data Warehouse (ADW) and has been joined with the Labor Distribution role in that warehouse. To access the data mart a user must:
- have access to ADW,
- be given the "Labor Distribution" role in ADW, called "DST"
- be trained in using Standard Reports in Brio-Hyperion by the Budget Office or Accounting
Access to ADW follows the normal authorization path for that tool, see the Division of Financial Affairs security request on-line form at http://www.accounting.cornell.edu/Account_Security.cfm
or e-mail dfa-acctsec@cornell.edu for assistance. The recommendation to grant access is generated by the unit's data access authorizer.
Because Financial Planning data within the Accounting Budget Data Mart has been compiled with accounting data within ADW, a user's access to Financial Planning data will be governed by the accounts available to that user in ADW. Users may not be given the Labor Distribution role for only a subset of their accounts within ADW. Note that the selection of accounts may be different from the account ranges visible to that user in CPBS proper.
Human Resources (HR) Budget Data Mart
This data mart is freestanding. In the future it may be compiled with the HR/Payroll data mart in the same way that the Accounting Budget Data Mart is associated with ADW. To access the data mart a user must:
- have Actuate HR/Payroll Reporting Role A or B (Role A is Org level access Role B is Department level access)
- be granted the Human Resource role of “BDG” by CIT to allow Brio data base access
- be trained in using Standard Reports in Hyperion BRIO by the Budget Office
Access to Actuate follows the normal authorization path for that tool, see the CIT HR data access application. If you need assistance with the request form, please contact Sarah Christen, sjc37@cornell.edu. The recommendation to grant access is generated by the unit's data access authorizer.
Because Workforce Planning data will eventually be joined with HR/Payroll data, we have elected to define a user's access based on the departments available to that user in Actuate under HR/Payroll Reporting Role A or B. This selection of HR departments may be different from the HR departments visible to that user in CPBS.
In the HR Budget role of “BDG”. the user may not see SIP data.
Human Resources (HR) Budget Data Mart with SIP
In this role the user can see Workforce Planning information as well as SIP. In all other respects it is like the HR Budget Workforce Data Mart role. To access the data mart a user must:
- have Actuate HR/Payroll Reporting Role A or B (above), and have SIP access in CPBS and
- be granted the Human Resource role of “BDG-SIP” by CIT to allow Brio-Hyperion database access
- be trained in using Standard Reports in Brio-Hyperion by the Budget Office
Because a user's access to the Workforce Planning and SIP records in this data mart will be based on the departments available to that user under their HR/Payroll Reporting role, the SIP records visible to the user in the data mart may be different from the SIP records visible to that user in CPBS proper.
For More Information Contact:
Jean Palmer
jlp12@cornell.edu