Best Practices

In cases when users cannot perform certain functions, make sure that

• Business processes prohibit users from accessing these functions. For example, if a project manager cannot access Project Portfolio, make sure that the business process does not allow them to view Portfolio Analyzer. If the business process does not allow project managers to access this feature, it means that the system has been properly configured.

• Users have sufficient permissions at the group level and that they can access categories with sufficient security permissions.

• Certain functions have not been denied at the server level.

In cases where users cannot access certain pages, make sure that views have been defined for the data categories and that they are accessible by users.

Always document changes made to the security model or to views, and make sure that these changes are in line with the organization's business rules.