User manual BUSINESS OBJECTS FINANCIAL GOVERNANCE GETTING STARTED GUIDE

[. . . ] BusinessObjects Financial Governance Getting Started Guide IC Functional Administrator Copyright © 2007 Business Objects. If you find any problems with this documentation, please report them to Business Objects in writing at documentation@businessobjects. com. Patents Business Objects owns the following U. S. patents, which may cover products that are offered and sold by Business Objects: 5, 555, 403, 6, 247, 008 B1, 6, 578, 027 B2, 6, 490, 593 and 6, 289, 352. Business Objects, the Business Objects logo, Crystal Reports, and Crystal Enterprise are trademarks or registered trademarks of Business Objects SA or its affiliated companies in the United States and other countries. [. . . ] Before the authorizations for a specific division can be set, the authorizations for `Normal User' must be cleared at Authorizations for entire Content and at Authorizations per Content Type ­ Divisions. 7) 8) 9) Proceed to the Admin section. On the tree, expand the Global Authorizations menu and click Authorizations for entire Content. Click the check box in front of $NormalUser and click Remove Selection. Now also clear the authorizations for $NormalUser for Divisions. 10) On the tree, expand the sub menu Authorization per Content Type and click Divisions. 11) Now also clear the authorizations for $NormalUser. Setting authorizations for divisions Local permissions only apply to the selected element. Inherited permissions apply to all items of the same type as the selected item or throughout the entire application. Since these are inherited permissions, they can only be deleted in the Admin section at Global Authorizations. Note: it is possible to overrule the inherited permissions for the selected element (for example: you want to give a user with the Editor role also permission to approve a certain process). To do this, you add the appropriate trustee and grant the desired permissions. If you delete this trustee, it will be moved back to the list of inherited permissions. 12) Proceed to the Organization section and on the tree, click Functional Organization. 13) Click the division Europe and on the details page, proceed to the Permissions tab. 18 IC Functional Administrator BusinessObjects Financial Governance Getting Started Guide Authorization structure Level B Authorizations on Internal Control Categories / Elements 3 14) In the Local Permissions area, click Add User Trustee. 15) Select Ben from the available Users and click . 18) In the Relation Permissions area, click Add User Trustee. 19) In the dialog box that opens, select Ben from the User list. 20) Select Yes from the Approve rights assigned list and click Update. Notice that the read rights are granted automatically 21) Now also set the appropriate authorizations for the divisions according to the table. DIVISION(S) Europe and USA Europe Europe USA USA PERSONS Ben James Caroline Richard Sharon PERMISSIONS Read rights Read rights Read rights Read rights Read rights RELATION PERMISSIONS Approve rights Write rights Read rights Write rights Read rights Level B Authorizations on Internal Control Categories / Elements The second level of authorization is authorization on IC categories and elements. The IC elements are: Business Cases Control Objectives Controls Documents Exposure Indicators Information Components Issues Persons Processes Risks Significant Accounts You can set these authorizations in the Admin section at Global Authorizations ­ Authorizations per Content Type and Authorizations for Categories. Since it concerns global authorizations, these authorizations are inherited at element/category level. For example, when you grant write rights to a user (or system role) for Significant Accounts, the authorizations automatically apply to all Significant Accounts that are created. Setting authorizations on IC elements 1) 2) Proceed to the Admin section. On the tree, expand the Global Authorizations menu and the sub menu Authorizations per Content Type. IC Functional Administrator BusinessObjects Financial Governance Getting Started Guide 19 3 Authorization structure Level B Authorizations on Internal Control Categories / Elements 3) 4) 5) 6) 7) 8) Click Control Objectives. Click Add User Trustee. In the dialog box that opens, select Ben from the list. Select Yes from the Create rights assigned list and select Yes from the Approve rights assigned list. Now also set the following authorizations according to this table: USERS Caroline Sharon James Richard Ben AUTHORIZATION IC ELEMENTS S Read rights Elements mentioned above except controls and documents Elements mentioned above except controls and documents Elements mentioned above except documents Create rights + Write rights Create rights + Approve rights Note: in most cases it is not necessary to replace the read rights for a `Normal User' by read rights for specific users (or system roles). [. . . ] On the tree, first expand the BWise folder, next expand the Customizations folder. 38 IC Functional Administrator BusinessObjects Financial Governance Getting Started Guide Customization Attribute settings 5 3) Select the BWise^Internal Control Customization component and make it editable by clicking editable). on the toolbar (or on the Component menu, click Make 4) 5) 6) Expand the component until the contents of the BWise^Internal Control Customization package is visible. In the attribute dialog box, select the attribute Location and click Edit. 7) 8) 9) Select the check box Hide for web applications and click Finish. Next, select the attribute COSO Element and click Edit. 10) Select the check box Mandatory in portal and click Finish. IC Functional Administrator BusinessObjects Financial Governance Getting Started Guide 39 5 Customization Attribute settings 11) Click OK to close the attributes dialog box. [. . . ]