Access

The Access page enables administrators to manage user roles by creating access groups and access group assignments for users. Users and Platform Security Groups are created in theOneStream System Administration tab. Administrators can leverage existing application security by adding Users and pre-existing Platform Security Groups to access groups on this page. Administrators can also mix and match based on their existing security model.

Manage Access Groups

  1. Click the Insert Row icon.

  2. Enter an access group name and description. The Name field is required, and the name must be unique for the access group to save.

    The Insert Row button is lines with a plus sign with an orange outline

  3. Click the Save icon.

IMPORTANT: You cannot delete an access group if it is actively assigned to a site. The access group must first be removed from all assigned sites. See Sites.

Manage Access Group Members

Users can be assigned to the following roles:

Role Description
Viewer Viewers can only view data on the Home page. This role does not have access to the Settings, Administration, and Reports pages.
Preparer Preparers enter data on the Home page. This role does not have access to the Settings, Administration, and Reports pages.
Approver Approvers manage profile statuses. Approvers have access to the Settings, Administration, and Reports pages if they are also a OneStream Administrator or Solution Administrator.

To add users to an access group, complete the following steps:

  1. Select the access group from the Access Group grid to display the User and Platform Security Group grids in the pane.

  2. From the Users grid, click the Insert Row icon.

    1. From the User drop-down menu, select a user from the list.

    2. From the Role drop-down menu, select a role for that user.

    3. Click the Save icon.

NOTE: Multiple roles cannot be added to the same user.

To add user groups to an access group, complete the following steps:

  1. Select an access group from the Access Group grid to display the User and Platform Security Group grids in the pane.

  2. From the Platform Security Groups grid, click the Insert Row icon.

    1. From the Group drop-down menu, select a group from the list.

    2. From the Role drop-down menu, select a role for that user group.

    3. Click the Save icon.

NOTE: Multiple roles cannot be added to the same user group.

The Users grid has a sample user assigned to the Viewer role. The Platform Security Groups field has a sample user group assigned to the Approver role.

The Remove Row icon is lines with an X, flat design style.Click the Remove Row icon to remove a user or user group.

Import Access Groups

The download icon is a down arrow and the import icon is a grid with a plus sign

Use the Download and Import buttons to download a template and import access groups and group members.

To import access groups and group members, complete the following steps:

  1. Click the Download button to display the Template Options slide-out panel.

  2. From the Select Template drop-down menu, select either Access Groups or Group Members.

  3. Click the Download button. Fill in all required template columns.

    Column Description
    Access Groups Template
    Name Enter a name for the access group.
    Description (Optional) Enter a description for the access group.
    Group Members Template
    Access Group From column drop-down menu, select an access group.
    Member Type From the column drop-down menu, select either Security User or Security Group.
    User or Group Name Enter a user or group name.
    Role

    From the column drop-down menu, select either Preparer, Approver, or Viewer.

  4. To import the template, click the Import button.

  5. In the File Upload window, click the BROWSE button to open File Explorer.

  6. Select the template and click the Open button.

  7. Click the Upload button.