Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Authorization objects and roles

The Pillar two dialogues are not editable for every user of the company. It is possible to grant access by creating roles with different authorization objects. This means, for example it is possible to create a role “P2 Expert”, that has rights for all Pillar 2 dialogues or a role “P2 Entity User” that is granted just “Edit” rights for the entity data collection of a specific company. Roles may also get more important, when the MNE Group has POPEs and it is not wanted, that all users are able to see the calculation area, with specific information about other entities of the Group. Therefore, the Calculation area might specifically be restricted for certain users.

...

The

...

Authorization Objects are fully updated with the October GTC Version (24.04.)

...

Authorization Objects from earlier versions:

BEPS Module - Edit

Gives Edit Rights for the BEPS Module. It has to be granted for every user, that wants to Edit in the Pillar 2 or the CbCR Module.

BEPS Module - Read

Gives Reading Rights for the BEPS Module. It has to be granted for every user, that wants to Read in the Pillar 2 or the CbCR Module.

BEPS Module: Pillar 2 - Edit

Gives Edit Rights for the Pillar 2 Module. It has to be granted for every user, that wants to Edit in the Pillar 2 Module.

BEPS Module: Pillar 2 - Read

Gives Reading Rights for the BEPS Module. It has to be granted for every user, that wants to Read in the Pillar 2 Module.

BEPS - Administration - Edit

Gives Edit Rights for the BEPS Administration area. It has to be granted for every user, that wants to Edit

in the Pillar 2 or the CbCR Module.

the Administration area - therefore change Reporting Dimension Types.

BEPS - Administration - Read

Gives Reading Rights for the BEPS Module. It has to be granted for every user, that wants to Read in the Pillar 2 Administration area - to read the Reporting Dimension Types selected.

Pillar2: Group Data Collection - Edit

Gives Edit Rights for the Group Data Collection. Usually assigned to few users, e.g. a Pillar 2 Expert.

Pillar2: Group Data Collection - Read

Gives Reading Rights for Group Data Collection.

Pillar2: Country Data Collection - Edit

Gives Edit Rights for the Country Data Collection. Usually assigned to few users, e.g. a Pillar 2 Expert.

Pillar2: Country Data Collection - Read

Gives Reading Rights for Country Data Collection.

Pillar2 - Data Collection - Edit

Gives Edit Rights for all dialogues in the Entity Data Collection. Should be assigned to users, that make entries for (specific) entities.

Pillar2 - Data Collection - Read

Gives Reading Rights for all dialogues in the Entity Data Collection.

Pillar2 - Calculation - Edit

Gives Edit Rights for the Pillar 2 Calculation. Has to be assigned if the user is wanted to be able to perform calculations in the Pillar 2 Module.

Pillar2 - Calculation - Read

Gives Reading Rights for the Pillar 2 Calculation.

Pillar2 - Home - Edit

Gives Edit Rights for the Pillar 2 Calculation Home area. Has to be assigned if the user is wanted to be able to perform calculations in the Pillar 2 Module.

Pillar2 - Home - Read

Gives Reading Rights for the Pillar 2 Calculation Home area.

Pillar2 - Safe Harbour Check - Read

Allows the user to read the Safe Harbour Check (for all jurisdictions / subgroups)

Pillar2 - Entity Calculations - Read

Allows the user to read the CE Calculations (for all CEs of the MNE)

Pillar2 - De Minimis Check - Read

Allows the user to read the De Minimis Check (for all jurisdictions / subgroups)

Pillar2 - Jurisdictional Blending - Read

Allows the user to read the Jurisdictional Blending (for all jurisdictions / subgroups)

Pillar2 - Delete Snapshot - Execute

Gives rights to delete Snapshots in the Calculation Home area. Usually assigned to few users.

 

Add label