What is the best way to secure employee salary data to a central admin?
Hello -
We are designing our first FP&A model and currently employee data is within that model. We would like only one person in the organization to be able to have access to all company salary data to keep detail by person secure to all other users. The issue we are running into is if you have a model builder role, you can provision yourself access to all company salary data. Is there a solution to centralize access to the salary data to only one administrator? Would the employee data need to be in a separate model?
Best Answer
-
Hi @furlottm
You would need the salary data to be in a separate model, you cannot restrict the data only to one administrator in a model.
0
Answers
-
Thank you! In that case would you then only have one model builder in the salary data model to achieve desired security?
0 -
Yes exactly, you can restrict the access to the salary model.
0 -
Hi @furlottm
Yes, you will have one model builder (WSA-workspace admin) in your separate salary model.
You might want consider using a separate workspace for sensitive information. Anaplan has data links that allow for imports between workspaces.
Your WSA in the salary model should be the same as your tenant admin, since tenant admins can add anyone to a workspace by going to Administration → Users → Internal → Workspaces and verifying the Boolean.
Additionally, you can enhance security by implementing Dynamic Cell Access (DCA) on cells containing salary information. Also, using the Audit API to run an audit model by @QuinE can provide an extra layer of security.
0
