Maintaining Users And User Groups
Administrative users with the appropriate permissions can perform user and user group maintenance tasks. These include adding users or user groups, modifying users or user groups, assigning access to a particular user or user group, resetting user passwords, and deleting users or user groups.
Understanding authentication methods
Longview supports the following authentication methods:
Authentication method | Notes |
---|---|
Longview |
Authenticates users through Longview authentication. |
Windows |
Authenticates users through their Windows domain credentials. |
Third-party web |
Authenticates users through a third-party web authentication application. Note: Users select Single Sign-On (Web) when signing on. |
The restrictions for user names depend on the type of authentication you are using. The following table explains the restrictions for each authentication method.
Authentication method | User name restrictions |
---|---|
Longview |
If your company uses Longview authentication, user names:
If your company enforces password complexity, passwords must meet all password complexity restrictions, including (but not limited to) the following:
For more information on password complexity, see the Longview Server Manager Guide. Note: If you plan to work with the Email event rule type, and your user name contains an “at” sign ( @ ), your user name and email address must be exactly the same. |
Windows |
If your company uses Windows authentication, use the user’s Windows user name. The Windows user name:
|
Third-party web |
If your company uses third-party web authentication, use the user name from the third-party software. Third-party web user names:
Third-party web authenticated administrative users can change the passwords of Longview authenticated users, provided the administrative users have been granted sufficient access. Third-party web authentication is not supported for Microsoft SharePoint. Note: If you plan to work with the Email event rule type, and your user name contains an “at” sign ( @ ), your user name and email address must be exactly the same. User names containing special characters, including the “at” sign ( @ ) must be enclosed in quotes. |
Understanding pre-configured users and user groups
Your system contains pre-configured users and user groups to ease implementation. Once you have installed Longview, you can customize these users and user groups, or add other users and user groups, to suit the needs of your company.
Longview comes with several pre-configured symbol access roles; however, only the V3_Compatible_Access role is used.
For more information on symbol access roles, see the Longview Application Administrator Guide.
Longview contains the following pre-configured users:
- Solutions Framework and Longview Close:
User Assigned User Groups SampleFinance
This user is assigned to the FinancePowerUsers group.
SampleReporting
This user is assigned to the ReportingUsers group.
SampleSysAdmin
This user is assigned to the Administrators user groups.
- Longview Tax:
User Assigned User Groups TaxAdmin
This user is assigned to the Administrators user group.
Note: If you have upgraded from a version of Tax Provision previous to 7.2.2, you may have additional preconfigured users.
Longview contains the following preconfigured user groups:
- Solutions Framework and Longview Close:
User group Description Administrators
This user group has access to view all information in the system, can update system settings, and create and publish input apps and reports.
FinancePowerUsers
This user group has access to view all information in the system, and enter data into the system.
ReportingUsers
This user group has access to view all information in the system, but not modify system settings or data,.
- Longview Tax Provision:
User group Description Analysts
This user group has write access to create a tax provision.
CorporateAnalysts
This user group has write access to create a tax provision and has access to perform foreign exchange adjustments.
Administrators
This user group has access to view all information in the system, can update system settings, and create and publish input apps and reports.
Note: If you have upgraded from a version of Tax Provision before 7.2.2, your groups may be prepended with the relevant tax standard.
- Longview Task Management:
User group Description Administrators
This user group has access to view all information in the system and can update system settings.
Understanding pre-configured symbol access
Longview provides some symbol access for preconfigured groups as a starting point. You should review and update this access during implementation as well as when new entities or currencies are added.
-
Solutions Framework and Longview Close:
Note: Administrators who connect using the Administrators group have full access to all symbols. Reporting Users have read access to reporting hierarchies.
The following table lists the pre-configured symbol access for the finance power users group and the related implementation considerations.
Dimension Pre-configured read access to... Pre-configured read access to... Implementation Considerations ACCOUNTS
- Retained earnings net income
- Validation report accounts
- Calculated roll forward accounts (beginning and ending balance)
- Calculated cash flow accounts (beginning and ending balance)
- Trial balance
- Roll forward movement accounts
- Cash flow accounts
- P&L variance bridge accounts
- Foreign exchange rates
TIMEPERIODS
All time periods
Some inputs are done on year to data time periods (trial balance) and some are done on periods (cash flow adjustments, foreign exchange rates)
ENTITIES
Elimination entities (calculated by intercompany eliminations)
All other entities
You will need to add access to any reporting hierarchies added to the system.
If you use this group for assigning other users, you may want to remove entity access and set it at the user.
DATAVIEWS
All data view hierarchies
SCENARIOS
All scenarios hierarchies
CURRENCIES
All currency hierarchies
If you use this group for assigning other users, you may want to remove currency access and set it at the user.
-
Longview Tax Provision:
Note: Administrators who connect using the Administrators group have full access to all symbols, including trial balance data, FX rates, tax rates, and override rates. These full-access symbols include calculated accounts; therefore, if an Administrator were to input data into tax provision input apps, calculation errors would occur. To avoid this complication, Administrators do not have the appropriate access for the input apps required to submit provision data.
The following table lists the preconfigured symbol access for preconfigured user groups and the related implementation considerations.
Dimension Preconfigured read access to... Preconfigured read access to... Implementation Considerations ACCOUNTS
- calculated tax provision accounts
- the trial balance hierarchy (TrialBal)
- the translation rate types hierarchy, including symbols such as the foreign exchange period average rate (FXRates)
- manual tax provision accounts
- the tax rates hierarchy, including symbols such as the current year tax rate (TaxRates)
TrialBal:
- Change to write access for groups that require the ability to input trial balance data.
- Publish the XCCC400 - Chart of Accounts Adjustments.lvapp or XCCC401 - Book Chart of Accounts Adjustments.lvapp input app to the groups that require the ability to input trial balance data.
FXRates:
- Change to write access for groups that require the ability to input foreign exchange rates.
- Publish the XCCC100 - FX Rates.lvapp and XCCC101 - Return FX Rates.lvapp input apps to the groups that require the ability to input foreign exchange rates.
TIMEPER
- all historical actual time periods (Actual)
- all historical return time periods (Return)
- the current period (CYTaxPer)
- the current return period (RtnTaxPer)
ENTITIES
- the Total Entities hierarchy (TENTITIES)
- the partnership hierarchy (PShip)
- the jurisdiction hierarchy (Jurisdictions)
- the total operations hierarchy (Total_Operations)
TENTITIES:
- Set write access at sub-consolidation levels or lowest level entities for the users or groups. When setting write access for the group, set a higher priority than the TENTITIES read access.
PShip:
- Set write access to partnership entities for the users or groups. When setting write access for the group, set a higher priority than the PShip read access.
- Set read access to partnership owner entities for the users or groups. When setting read access, set a higher priority than the sub-consolidation levels of entities under TENTITIES.
EntitiesHier1 — 5:
- Set read access for the users or groups at any level below the root. Do not grant access directly to these roots.
DETAILS
- the total details hierarchy (DetailsT)
- the detail summary symbol (SummDet)
DetailsT:
- Change to write access for groups that require the ability to input to Details symbols other than SummDet.
CURRENCY
- the currencies hierarchy (Currencies)
- the foreign exchange translation rates hierarchy, including symbols such as USD from CAD (FXTranslations)
- the functional currencies hierarchy (SourceC)
FXTranslations:
- Set write access to foreign exchange translation rate symbols for groups that require the ability to input foreign exchange rates.
SEGMENTS
- the total segments hierarchy (SegmentsT)
SegmentsT:
- Change to write access for groups that require the ability to input to Segments symbols other than SummSeg.
ELEMENTS
- calculated tax provision elements
- manual tax provision elements
CONTROLS
- the system-required symbol (Dim7Set)
-
Longview Task Management:
The following table lists the preconfigured symbol access for preconfigured user groups and the related implementation considerations.
Dimension Preconfigured read access to... Preconfigured read access to... Implementation Considerations ENTITIES
EntitiesHier1 — 5:
- Set read access for the users or groups at any level below the root. Do not grant access directly to these roots.
DETAILS
- the detail summary symbol (SummDet)
- the national jurisdictions root symbol (NationalJurisdictions)
- the regional jurisdictions root symbol (RegionalJurisdictions)
- the local jurisdictions root symbol (LocalJurisdictions)
CURRENCY
- the currencies hierarchy (Currencies)
- the functional currencies hierarchy (SourceC)
Longview recommends that you assign symbol access through user groups as much as possible to simplify maintenance. For example, if a user is responsible for the for a specific entity, you can grant them access to the required accounts at the user group level, and then grant them access to their particular entity at the user level.
Note: Symbol access specified at the user level takes precedence over symbol access at the user group level.
Understanding the Users and User Groups editor interface
The Users and User Groups editors contain several elements that are unique from other editors.
The Users and User Groups editors are divided into the list area and the properties area. Each of these areas contains toolbars with some functionality common to all editors, as well as functionality unique to the Users and User Groups editors.
List area
The list area contains a list of all users or user groups that currently exist in your system. The list contains basic information about the user or user group, including the most recent date and time that a user was logged in to the system, and the most recent date and time that a user’s properties were modified.
The list area includes an editor toolbar and a page toolbar.
Editor toolbar
The following buttons appear on the Users and User Groups editor toolbars:
Button | Description |
---|---|
Refresh |
Click the Refresh button to update all system information in the editor in view to reflect any changes that you or any other users have made. |
Maintenance |
Click the Maintenance button to switch Maintenance mode On or Off. When you make any database maintenance changes to the Data Server repository, Maintenance mode is switched On automatically. While Maintenance mode is On, the following apply: users can connect and perform read-only queries users can lock data areas and submit data (these activities are suspended, not stopped, while user and symbol changes are committed and refreshed) Note: Remember to switch Maintenance Off after saving all changes to users or user groups. For more information on Maintenance, see the Longview Application Administrator Guide. |
Help |
Click the Help button to open context-sensitive Help related to the Users or User Groups or editor. |
Page toolbar
The page toolbar contains functionality unique to the selected editor, including buttons related to creating and deleting users and user groups.
Properties area
The properties area contains the detailed properties of the selected user or user group. The properties area is divided into several sections. You can expand or collapse each section by clicking the section name.
The properties area includes the properties toolbar and several buttons specific to fields in the properties area.
Properties toolbar
The following table lists the buttons that appear on the properties toolbar.
Button | Description |
---|---|
Save |
Click the Save button to save any changes you have made to the properties of the selected user or user group. |
Discard Changes |
Click the Discard Changes button to remove any changes you have made to the properties of the selected user or user group. |
Copy User Properties/Copy User Group Properties |
Click the Copy User Properties and Copy User Group Properties buttons to copy the properties from an existing user or user group to the selected user or user group. For more information, see Copying user properties and Copying user group properties. |
Expand |
Click the Expand button to expand all sections in the properties area. |
Collapse |
Click the Collapse button to collapse all sections in the properties area. |
Properties area buttons
Several sections in the properties area contain the Edit and Search buttons which you can use to populate the selected field. In addition, the User Attributes section contains the More and Less buttons, which you can use to further expand or collapse the section.
Button | Description |
---|---|
Edit |
Click the Edit button to open a dialog that you can use populate the selected field. |
Search |
Click the Search button to open the Symbol Selector dialog that you can use to populate the selected field. |
More |
Click the More button to display all fields in the User Attributes section. |
Less |
Click the Less button to display a compact selection of the fields in the User Attributes section. These fields are the ones you are most likely to modify. |