Access rights for cost object controllers
The Cost control workspace is a central point where managers can view the performance of their cost objects. This workspace lets managers consume Cost accounting data even though they aren't cost accountants. For security reasons, managers should be allowed to see only the Cost accounting data that is related to the specific cost objects that they are responsible for.
There are four unique roles in Cost accounting.
| Role name | License |
|---|---|
| Cost accounting manager | Activity |
| Cost accountant | Operations |
| Cost accountant clerk | Operations |
| Cost object controller | Team members |
This article explains how to assign the Cost object controller role to a manager.
When the Cost object controller role is assigned to a manager, the manager can perform the following tasks:
Access the Cost control workspace (in the client).
- Drill through and have view access to the pages that support the drill-through experience.
Access the Cost control workspace (in the mobile application).
Note
The Cost object controller role doesn't control which cost objects the user can access and view data for. Row-level security is provided via dimension hierarchies and the Access list hierarchy.
Grant access rights
The following example shows what a dimension hierarchy can look like.
Dimension hierarchy details
| Dimension hierarchy name | Dimension | Dimension hierarchy type name | Access list hierarchy |
|---|---|---|---|
| Organization | Cost centers | Dimension classification hierarchy | Yes |
You can use the Users FastTab in the hierarchy designer to insert one or more user IDs on each node.
| Nodes | Users | From dimension member | To dimension member |
|---|---|---|---|
| Organization | Benjamin, Claire | ||
| Admin | April | ||
| Finance | Alicia | CC002 | CC003 |
| CC007 | CC007 | ||
| HR | Arnie | CC001 | CC001 |
| Production | David | ||
| Packaging | Ellen | CC005 | CC005 |
| Assembly | Chris | CC006 | CC006 |
Note
Cost accountants should be assigned to the top level of the hierarchy, so that they can see all entries in Cost accounting.
Before the Access list hierarchy and its security settings can be applied, the Enable view access for cost object dimension members option must be set to Yes on the General tab of the Cost accounting parameters page (Cost accounting > Setup > Parameters).
The settings for the Access list hierarchy are used to control the data that is shown in following areas:
Cost control workspace (in the client):
- Data on the pages that are used for drill-through
Cost control workspace (in the mobile application):
- Balances in cards
Microsoft Power BI:
- Data that is shown in Power BI visualizations
- Data Power BI visualizations that are embedded in the Dynamics 365 Finance client
Important
- Before the Access list hierarchy can affect data in Power BI, the Access list hierarchy and row-level security in Power BI must be paired. For more information, see Set up security for Cost accounting content pack.
- This article shows the prerequisites that must be in place before you can use the Cost control workspace.
Additional resources