(2 OM) 10. Security Structure

Question 1

When deleting a user from Adaptive Planning, what items associated with that user also get deleted?

1. Personal reports.
2. Personal perspectives, dashboards, or charts shared with other users (versus those created in the company folder).
3. The audit trail associated with that user.
4. Cell and sheet notes created by the user.
5. Any shared reports that the user created.

Answer 1

1. Personal reports.
2. Personal perspectives, dashboards, or charts shared with other users (versus those created in the company folder).
   (The other 3 items remain).

Question 2

Owned Levels do allow the user to view or edit data for the owned level. True or false?

Answer 2

False (You must grant access using Access Rules.)

Question 3

What are some privileges related to owned levels?

1. View and edit data at that owned level.
2. Manage owned levels through Model Management > Levels.
3. Approve levels in Workflow.
4. Assign level ownership to other users.
5. View and create journal entries on owned levels.
6. Review intercompany elimination debits and credits for owned levels.
7. Receive shared-by-level reports in the Shared Reports folder.

Answer 3

2. Manage owned levels through Model Management > Levels.
3. Approve levels in Workflow.
4. Assign level ownership to other users.
5. View and create journal entries on owned levels.
6. Review intercompany elimination debits and credits for owned levels.
7. Receive shared-by-level reports in the Shared Reports folder.

Question 4

What are some use cases for Global User Groups?

1. Grant specific Version access.
2. Assign access rules to a group of users.
3. Grant specific Time access.
4. Assign Tasks.
5. Share Perspectives.
6. Share web reports and email reports to a group of users.

Answer 4

1. Grant specific Version access
2. Assign access rules.
3. Assign Tasks.
4. Share Perspectives.
5. Share web reports and email reports to a group of users.

Question 5

If you try to delete a user group that is assigned to a process task, Workday Adaptive Planning will alert you. True or false?

Answer 5

True

Question 6

Access rules define specific intersections of ___ that users or groups can ___ or ___.

Answer 6

Data, edit, view

Question 7

Some dimensions may not be available for selection from the Access Rules page. Why is this?

1. The dimension has no values.
2. You can only secure 3 custom dimensions max in access rules.
3. The dimension has more than 10,000 values.
4. The dimension settings “Use on Levels” and “Data import automatically creates dimension values” are turned on.
5. The “Edit dimension on sheet” option is turned on.
6. The dimension is a flat list dimension.

Answer 7

2. You can only secure 3 custom dimensions max in access rules.
3. The dimension has more than 10,000 values.
4. The dimension settings “Use on Levels” and “Data import automatically creates dimension values” are turned on.
5. The “Edit dimension on sheet” option is turned on.

Question 8

What symbol is used to grant access to owned levels?

1. (~)
2. (+)
3. +
4. (+~)

Answer 8

1. (~)

Question 9

In addition to granting access to Levels in access rules, you can also grant access to ___, ___ and ___.

Answer 9

Accounts, dimensions, attributes

Question 10

Owned levels are the same as access rules, but allow for certain extra privileges. True or false?

Answer 10

False (owned levels are different and separate to access rules).

Question 11

Which areas in Adaptive Planning can you review a user’s Owned Levels?

1. The User profile.
2. The Associations page, under “View Details.”
3. The Access Rules page.
4. The Permissions Sets page.

Answer 11

1. The User profile.
2. The Associations page, under “View Details.”

Question 12

In the case of multiple rules that conflict, each column defaults to the most ___ rule.

Answer 12

Permissive

Question 13

What settings can expose data, regardless of the access rules set for that user/group?

1. User-assigned sheets.
2. Workflow approver role.
3. Data privacy settings (turning on “Value of account is public at all levels” for an Account).

Answer 13

1. User-assigned sheets.
2. Data privacy settings (turning on “Value of account is public at all levels” for an Account).

Question 14

Access rules secure data by working with other parts of the model including…

1. Permission sets
2. Owned Levels.
3. Version Access Control (e.g. Hidden or Locked versions.)
4. Model Integration role.
5. Salary detail setting.
6. Sheet settings.
7. Cube sheet restrictions.
8. Standard sheet restrictions.

Answer 14

1. Permission sets
2. Owned Levels.
3. Version Access Control (e.g. Hidden or Locked versions.)
4. Salary detail setting.
5. Sheet settings.
6. Cube sheet restrictions.

Question 15

Associations allow administrators to create groups of ___ and dimension values for individual users. When you create an ___ ___, you can specify the association code instead of detailing individual dimension values.

Answer 15

Dimensions, access, rule

Question 16

Access Rules best practice - Consider creating rules for Global User Groups if you have many users or add new users often. True or false?

Answer 16

True

Question 17

Access Rules best practice - Be cautious when adding a user to ___ groups since it makes determining access difficult. There is no reporting functionality on groups.

Answer 17

Multiple

Question 18

Access Rules best practice - Use ___ to create dimension value access to users, which you can use when creating access rules.

Answer 18

Associations

Question 19

Access Rules template best practice - The only way to give access to an (Only) level is to give access to the parent and all descendants. True or false?

Answer 19

True

Question 20

You can use other rules to remove access to descendants once you’ve granted access to parents. True or false?

Answer 20

False

Question 21

To display any rollup value on a sheet, report, or chart, you need access to all descendants of all rollup. True or false?

Answer 21

True

Question 22

The “User Access Calculator” allows administrators to view a user’s access control at a specific intersection. To check an intersection, you must specify a ___, a ___, an ___, and a ___.

Answer 22

User, Level, Account, Version.

Question 23

What does SAML SSO (single sign on) stand for?

1. System Access Markup Language.
2. Security Assertion Markup Language.
3. Security Access Matrices Lookup.

Answer 23

2. Security Assertion Markup Language.

Question 24

What are some examples of providers that work with SAML SSO?

1. Microsoft Azure Active Directory.
2. Okta.
3. Sidecar.
4. NetSuite.
5. PingOne.

Answer 24

1. Microsoft Azure Active Directory.
2. Okta.
3. PingOne.

Question 25

You can only enable SAML SSO for users manually, one by one. True or false?

Answer 25

False (manually or by bulk import).