The Manage Users area is used to manage user accounts including their access details and security permissions.

The user accounts are created after adding staff members via Staff screen.

• STEP 1: To access the Manage Users area, navigate to the Administration > Manage Users.

The Manage Users area displays all the current system users along the left.

Open

Figure 1.1

STEP 2: To create a new user click on the Button.

Open

• STEP 3: Type in a username and welcome salutation. Consider using the same naming protocol as in your network. This saves users from having to remember more than one username. Where the system is self-hosted, integration with Active Directory can ensure a universal logon for your users.

• STEP 4: Select a security role for a user. You can select a combination of security roles for a user, however the highest security level will override the lower levels. If one role allows you permission to carry out a certain action and another role doesn’t, the user WILL be allowed to carry out that action. For example, if a User has Reader AND Director permissions, he or she WILL be allowed to update actions within the Directorate. See the section Security for more information.

• STEP 5: Select the name of the staff member from the 'Linked Staff' drop-down list. The linked staff member must be the same person as you are setting up the login for (which is set up within the Staff area). This linkage allows the system to recognise the user and display the homepage responsibilities correctly.

• STEP 6: Define a password and set the user as Active by ticking the box. Inactive users will not appear in Staff lists throughout the system.

• STEP 7: Click the save icon.

The security model has developed so that each user group has different permissions, allowing security permissions to be linked to individual staff members.  All security levels may not be applicable within your organisation as some are linked to individual CAMMS products.

Camms.Strategy® specific roles:

• Administrator

• Access Archive Period

• Business Planner

• Business Unit Manager

• Confidential

• Director

• Executive Intelligence

• Financial Controller

• Next Business Cycle

• Operational User

• Performance Manager

• Reader

• Strategic Planner

Camms.Risk® specific roles:

• Risk Manager

• Operational Risk Editor

• Project Risk Editor

• Strategic Risk Editor

• Strategic Risk Viewer

• Operational Risk Viewer

• Project Risk Viewer

Camms.Project® specific roles:

• Project Creator

• Project Manager

• IPM Administrator

• Resource Administrator

Personnel Evaluation (Camms.Talent®) specific roles:

• PES Administrator

Audit Manager Specific Roles:

• Audit Settings Administrator

• GOV Audit Administrator

• OHS Audit Administrator

IBP Specific Roles:

• IBP Administrator

Workforce Planning (WPC) Specific Roles:

1. WPC Administrator

RevuMap Specific Roles:

1. RevuMap Administrator

2. RevuMap Planning Manager

3.1 Administrator

The Administrator has access to the entire system excluding the Financial Interface where available. This is the only security level which can edit details in the Framework section and has access to the relevant areas for user maintenance, passwords and rollover.

Refer Rollover Securities for information on how to configure specific securities around rollover.

3.2 Access Archive Period

This security level is used for users (other than Administrators) to be able to view the archived system periods. Administrators can view the archived periods as default, however this role gives the ability for other users to be able to view archive periods, without needing to give them a higher security role like an Administrator.

This will give them the ability to view the archive periods within the Tools drop-down menu, and however exclude them from viewing the rest of the rollover functionality. The archive periods are ‘read only’ for all users.

Please see the Rollover Archive Periods for more information on this section.

3.3 Business Planner

This is a security level for organisations which may have a corporate wide Business Planner. The Business Planner can create new service profiles and service profile groupings which are not restricted to their business unit.  The level does not allow editing of data in the strategic planning level or access to the executive reporting area. Business Planners make use of the performance management section for the purpose of business planning (i.e. they cannot link to goals, outcomes, strategies or organisation levels higher than service profiles).

*Cannot link KPIs to organisation levels higher than service profiles.

3.4 Business Unit Manager

This level has editing capabilities limited to the Business Unit they belong to. They do not have editing abilities in the performance management area, except for updating their actuals for KPIs (targets can only be modified by the Administrator, Strategic Planner, and Business Planner). The Business Unit Manager level is able to access the Executive Reporting area for the purpose of signing off Executive Comments / Business Highlights.

*Cannot create new executive reports but can view and sign off comments/highlights.

3.5 Confidential

This security level is used only if you have the confidential functionality. The confidential functionality is based on a tick box at Action and KPI level only - ability to make actions and KPIs hidden (confidential) from all users unless they have this security access level.

This security level is given to Users who need access and editing privileges to the 'Confidential Actions and KPIs'. They will also be able to see certain filters 'Show Confidential' in some standard reports.

3.6 Director

This security level is for someone who may have a number of business units below them. They can view any area of the system apart from the financial interface and administration area. They are only able to create, edit and delete information under their own directorate (i.e. Business Units under their directorate). Director level does not have the ability to edit data in the service delivery section – only the Administrator, Strategic Planner and Business Planner have access to this. Director level has full use of the Executive Reporting section.

*They do not have editing abilities in the performance management area; except for updating their actuals for KPIs (targets can only be modified by the Administrator, Strategic Planner, Business Planner and Performance Manager).

3.7 Executive Intelligence

The Executive Intelligence security level allows the user s to view the Executive Intelligence System (EIS) when they do not have an Administrator, Director or Business Unit Manager security level. This includes having the EIS button active on their home page for the user to access.

*Strategic risk link is visible as read only

3.8 Financial Controller

This level is for someone responsible for using the financial interface and is the only user who has the ability to access it. This user has read only access for all other areas of the system, except for the ability to update actions and KPIs and the budget section of the action page.

*Except for entering and updating budget information and updating actions within own BU.

3.9 Next Business Cycle

This level enables the user to switch from the current period to the next period created from completion of Stage 1 of Rollover. Depending on the user’s other permissions, the user can potentially undertake business planning in the next period.

This security level is given if you would like to give the individual user the ability to see the 'Next Period' of rollover (i.e. be able to view the Current period/Next period buttons when in-between rollover). This security level is typically given to Managers who need access to go into next period and edit the data whilst in between rollover.

Before assigning this security level ensure that the 'Show system period pane' setting is switched on so that after rollover stage 1, you will be able to view the system period Current period/Next period buttons.

If the setting 'Enable System Period Permission Boost' is switched on, then all users will see the next period automatically (i.e. you don't have to go through and give this security level to all users).

Please see the rollover for more information.

*Strategic risk link is visible as read only.

3.10 Operational User

This level is for the general user of the system. They are not able to edit actions or performance measures, other than updating progress and actuals.

3.11 Performance Manager

This level is for someone who is responsible for performance management and therefore has unlimited access to the performance management area, enabling them to create, edit and link KPIs, Scorecards and Dashboards. The Performance Manager only has updating access to other areas of the system.

• Cannot delete KPI nodes, only Administrator is able to delete the KPI nodes.

3.12 Reader

A reader is able to view all areas of the system however they cannot edit or modify anything.

3.13 Strategic Planner

Access is given to all areas of the system apart from the Administration area and the Financial Interface (where activated). Strategic Planners can create, edit and delete in all other areas of the system, including the Executive Reporting area. They are unable to edit the Framework section however except for Business Units. 

*Can create/edit Directorate and Business unit section within ‘Framework’ area.

3.14 Risk Manager

The Risk Manager is able to view, create, update and delete Operational, Project and Strategic Risk Assessments in the Risk Management area.

3.15 Operational Risk Editor

This security level allows the user to edit all operational risks. You would give this security level to an operational user who needs the ability to edit operational risks during a specific time frame or it can be used to give them this power user editing ability without having to give them a 'manager' role to edit all risks.

3.16 Project Risk Editor

This security level allows the user to edit all project risks. You would give this security level to an operational user who needs the ability to edit project risks during a specific time frame or it can be used to give them this power user editing ability without having to give them a 'manager' role to edit all risks.

3.17 Strategic Risk Editor

This security level allows the user to edit all Strategic risks. You would give this security level to an operational user who needs the ability to edit Strategic risks during a specific time frame or it can be used to give them this power user editing ability without having to give them a 'manager' role to edit all risks.

3.18 Strategic Risk Viewer

This security level allows the user s who do not have access to view all strategic risks (this role works when 'can view' security setting is on