Steps: Protect Sensitive Data

How Salary Detail Works

Standard sheet splits: The salary account is on a standard sheet. You add splits to the salary account to enter individual salaries. These splits roll up to the total in the salary account. Protect the account with the salary detail account setting.
Personnel modeled sheets: The rows in the modeled sheet contains sensitive data that calculates the salary per employee. In a modeled sheets, all the rows are splits. Protect the entire sheet with salary detail sheet property.

What the Salary Details Settings Don't Protect

Any user with permission to build reports and charts can use protected general ledger, custom, and modeled accounts.
Any user who has access to a sheet, chart, or report with protected accounts can see the total values of the protected accounts and drill to the levels they have access to.

Prerequisites

Navigation

For navigation, see each section in this article.

Basic Steps to Protect Sensitive Data

Create a privileged permission set with the
Access Salary Detail
permission. Assign this permission set to the users who can see sensitive details.
Protect accounts with the
Contains Salary Detail
setting.
Protect modeled sheets with the salary detail property.
Use best practices to secure the modeled sheet details.
Share snapshots with privileged users only, using the shared report setting.

Create a Privileged Permission Set

From the nav menu, select

Administration

>

Permission Sets

.

Select the
New Permission Set
button. You can also edit an existing permission set.
Enter a permission set name, such as
Salary Detail
, or
Privileged Data
.
Find and select the
Access Salary Detail
permission.
Add other permissions that allow users with this permission set to view and edit sheets, reports, and charts.
Select
Submit
.

From the list of permission sets, select the
Assign
link next to the new permission set.
Select from the
Available Users
list and add them to the
Selected Users
list for the permission set.
Select
Submit
.

Protect General Ledger and Custom Account Splits

Activate the Account Setting

Required permission:

Access Model Management > Model

From the nav menu, select

Modeling

.

Select
General Ledger Accounts
or
Custom Accounts
. Your salary account may be either.
Select you salary account from the account list.
In the settings on the right, find the Data Privacy section and select
Contains Salary Detail
radio button.
Save.

Account Best Practices

Cube accounts: You can't protect cube accounts or cube sheets. Sensitive accounts should be general ledger, custom, or modeled so that you can protect the data.

Linked Accounts: If you link the accounts, the

Contains Salary Detail

setting is read-only and depends on the source account. If you link to a modeled account in a protected modeled sheet, the setting is activated. If you link to a cube account or modeled account that's not in a protected sheet, the setting is off.

Account Formulas: If you use a protected account in the account formula or shared formula, you don't need the

Contains Salary Detail

setting to protect the account details . If you leave it off, users without the permission can explore the data of the linked account until they reach the protected account.

Protect Modeled Sheets

Activate the Sheet Setting

Required permissions: Access Model Management > Model and Access Salary Detail.

From the nav menu, select

Modeling

.

Select
Level Assigned Sheets
or
User Assigned Sheets.
From the sheet list, select the
Edit
link next to the name of your personnel sheet.
Select
Columns and Levels
.
From the toolbar, select Sheet Properties .
Select the Security tab and check
Viewing this sheet or any of its rows requires Salary Detail permission
.
Save the sheet.

The

Contains Salary Detail

setting of all its accounts are now activated and read-only:

If you use the accounts in reports and charts or link other accounts to the modeled accounts, only users with the permission can explore the data. Those without the permission can view only the totals.

All users must have the permission to open the sheet, even if it's a user-assigned sheet assigned directly to the user.

Best Practice with Dimensions and Modeled Accounts

Add custom dimensions to protected modeled sheets carefully.

Users without the

Access Salary Detail

permission can explore the data of protected modeled accounts in sheets, reports, and charts. They can only explore through time and levels. They can't see the dimension break down, which is considered a detail.

However, in reports, anyone can drag custom dimensions into a report. This breaks down the data of protected modeled accounts by dimension, potentially exposing data that you want to protect.

Example: A dimension for regions in personnel sheet lets users tag each employee with a region. In reports, the dimension breaks down the salary account by region. This doesn't expose sensitive data.

A dimension for employee names or employee titles in personnel sheets lets users in the sheet tag each row with a name or title. In reports, the dimension breaks down the salary account by name, exposing the salary of individuals, or by title, exposing the salary of groups or individuals.

Best Practice: In your protected modeled sheets, don't use custom dimensions for sensitive data, such as employee names, titles, etc. Use data entry columns to keep the data protected.

Protect Snapshot Reports