Edit

Access rights for cost object controllers

Note

Community interest groups have now moved from Yammer to Microsoft Viva Engage. To join a Viva Engage community and take part in the latest discussions, fill out the Request access to Finance and Operations Viva Engage Community form and choose the community you want to join.

The Cost control workspace is a central point where managers can view the performance of their cost objects. This workspace lets managers consume Cost accounting data even though they aren't cost accountants. For security reasons, managers should only see the Cost accounting data that relates to the specific cost objects that they're responsible for.

Cost accounting has four unique roles.

Role name License
Cost accounting manager Activity
Cost accountant Operations
Cost accountant clerk Operations
Cost object controller Team members

This article explains how to assign the Cost object controller role to a manager.

When you assign the Cost object controller role to a manager, the manager can perform the following tasks:

  • Access the Cost control workspace (in the client).

    • Drill through and have view access to the pages that support the drill-through experience.
  • Access the Cost control workspace (in the mobile application).

Note

The Cost object controller role doesn't control which cost objects the user can access and view data for. Row-level security is provided via dimension hierarchies and the Access list hierarchy.

Grant access rights

The following example shows what a dimension hierarchy can look like.

Dimension hierarchy details

Dimension hierarchy name Dimension Dimension hierarchy type name Access list hierarchy
Organization Cost centers Dimension classification hierarchy Yes

Use the Users FastTab in the hierarchy designer to add one or more user IDs on each node.

Nodes Users From dimension member To dimension member
Organization Benjamin, Claire
  Admin April
    Finance Alicia CC002 CC003
CC007 CC007
    HR Arnie CC001 CC001
  Production David
    Packaging Ellen CC005 CC005
    Assembly Chris CC006 CC006

Note

Assign cost accountants to the top level of the hierarchy, so they can see all entries in Cost accounting.

Before you can apply the Access list hierarchy and its security settings, set the Enable view access for cost object dimension members option to Yes on the General tab of the Cost accounting parameters page (Cost accounting > Setup > Parameters).

Use the settings for the Access list hierarchy to control the data that is shown in the following areas:

  • Cost control workspace (in the client):

    • Data on the pages that are used for drill-through
  • Cost control workspace (in the mobile application):

    • Balances in cards
  • Microsoft Power BI:

    • Data that is shown in Power BI visualizations
    • Data in Power BI visualizations that are embedded in the Dynamics 365 Finance client

Important

  • Before the Access list hierarchy can affect data in Power BI, you must pair the Access list hierarchy with row-level security in Power BI. For more information, see Set up security for Cost accounting content pack.
  • This article shows the prerequisites that must be in place before you can use the Cost control workspace.

Additional resources