Access Rules

You can create access rules to prevent specific plan cells from being edited by specific users. This can be useful when you close a time period, if you want to prevent project managers from editing actuals, and so on.

When setting up an access rule, you can define the following:

  • The dimension values the rule applies to.
  • The measures the rule applies to.
  • The users the rule applies to.

The combination of those three elements determines which plan cells are affected by the access rule, making them read-only.

Access rules restrict existing access, they do not provide additional access. Therefore, if a user has read-only access to a plan, they are not affected by any access rules for that plan. Similarly, if a user doesn't have access to a plan, they are not affected by access rules for that plan. If you want to restrict a user's access to an entire plan, use the Salesforce sharing feature and permission sets instead of access rules.

Note:

Access rules do not restrict relationships. This means that if you edit the details of a relationship row, you can select a dimension value that an access rule might otherwise restrict you from editing. For more information about relationships, see Relationships Overview.