Roles and permissions

Systems administrator. Owns configuration, integration health, the Drivers and DriverFormulas master, and the BudgetCycles calendar. Not the day-to-day budget operator.

• Configure authorized draft records and integrations
• No direct mutation of posted snapshots, approvals or historical evidence
• Manage RBAC and role assignments
• Configure Drivers, DriverFormulas, BudgetEntities hierarchy, the BudgetCycles calendar (FiscalYear, FiscalStartDate, FiscalEndDate), and the MaterialityThreshold per Account
• Configure inbound feeds from Finance / Accounting (ChartOfAccounts, posted JournalEntries), HRMS (Headcount), CRM Sales Forecasting (Revenue inputs), SCM Procurement (Commitments), Payroll (AvgSalary), and PM Portfolio (Initiative funding)
• Configure outbound to BI tools and the document store
• Approve mid-Cycle Driver / Formula changes
• View the full AssumptionsLog

Owns Targets, signs off the final BudgetVersion, reviews and approves BoardPacks. The named approver at the top of the budget-approval chain.

• CRUD on Targets (sets the top-down goalposts)
• Read on every BudgetCycles, BudgetVersions, BudgetLines, Drivers, DriverValues, DriverFormulas, Scenarios, WhatIfRuns, RollingForecasts, RollingForecastSubmissions, ForecastAdjustments, VarianceAnalyses, FluxComments, Commitments, BudgetTransfers, Approvals, AssumptionsLog org-wide
• Approve BudgetVersions at the CFO step (Status: InReview → Approved)
• Approve BudgetTransfers above a configured threshold
• Append FluxComments with AuthorRole: CFO on any material variance
• Approve BoardPacks (Status: InReview → Approved)
• Prepare own draft ForecastAdjustments allocated to explicit entity/account cells before the forecast is published
• Cannot edit Drivers / DriverFormulas master (Admin gate) and cannot post to the GL (Finance / Accounting)

Designs each BudgetCycle, manages Versions through the cycle, runs Scenarios, owns the RollingForecasts, builds BoardPacks. The day-to-day owner of the planning workbench.

• CRUD on BudgetCycles, BudgetVersions (create new Version, advance Status, lock), BudgetLines org-wide (only in authorized Draft Versions), Scenarios, WhatIfRuns, RollingForecasts, ForecastAdjustments, BoardPacks (Status: Draft → Generated → InReview)
• Read on Targets, Drivers, DriverFormulas, RollingForecastSubmissions, Commitments, Approvals, AssumptionsLog
• Approve BudgetVersions at the FP&A Director step
• Approve BudgetTransfers up to threshold (above goes to CFO)
• Accept RollingForecastSubmissions after the Analyst review (Status: FPAReviewed → Accepted)
• Append FluxComments with AuthorRole: FPADirector
• Cannot edit Drivers / DriverFormulas master (Admin), set Targets (CFO), or approve final BudgetVersions (CFO)

Operational role. Loads Actuals, runs and reviews VarianceAnalyses, prepares FluxComments, supports Cost-Center Heads through the submission cycle, drafts BoardPacks for Director review.

• Prepare and validate unpublished Actual and Forecast batches through the controlled workflows
• cannot edit published snapshots
• Maintain variance explanations, never manually set computed results or reviewer decisions
• Edit draft DriverValues within the current editable Version
• Trigger actuals-load-from-gl, variance-recompute, forecast-recompute, and driver-update-cascade workflows manually
• Read on BudgetCycles, BudgetVersions, Drivers, DriverFormulas, Scenarios, WhatIfRuns, RollingForecasts, RollingForecastSubmissions, ForecastAdjustments, Targets, Commitments, BudgetTransfers, Approvals, AssumptionsLog
• Review RollingForecastSubmissions (Status: Submitted → FPAReviewed)
• Append FluxComments with AuthorRole: FPAAnalyst

Department / cost-center owner. Submits own Entity's BudgetLines (Type: Budget) during the cycle, defends Variance each month with FluxComments, requests BudgetTransfers.

• CRUD on BudgetVersions of own OwnerEntity while Status: Draft — submit flips to Status: Submitted
• CRUD on BudgetLines of Type: Budget and Type: Forecast within own Version's draft / submission window where BudgetLines.Entity = own Entity OR Entity.Parent = own Entity (covers the sub-cost-center hierarchy under the head)
• CRUD on RollingForecastSubmissions where Entity = own Entity while Status: Draft → Submitted
• CRUD on own BudgetTransfers (Submit only — approval routes to FP&A Director / CFO)
• Append FluxComments with AuthorRole: CostCenterHead on VarianceAnalyses where Entity = own
• Read on Targets for own Entity, Drivers (catalog), DriverValues for own Entity, DriverFormulas, Scenarios shared with own Entity, Commitments for own Entity, Approvals on own Versions
• Cannot edit BudgetLines of Type: Actual, see other Entities' BudgetLines.Amount, set Targets, edit Drivers / DriverFormulas master, or approve own BudgetVersion

Line-of-business manager with scope limited to inputs that feed budget — headcount asks, capex requests, vendor cost estimates for own org. Sees aggregate own-org budget but no peer detail.

• Read on BudgetEntities for own org
• Propose draft DriverValues of Driver.Category IN (Workforce, Productivity) for own org's Entity (e.g. proposes Headcount ask for next period)
• Read aggregate BudgetLines of Type: Budget for own org Entity (own Entity totals only)
• Read Drivers catalog
• Read Targets for own org
• Append FluxComments with AuthorRole: CostCenterHead (acting on behalf of the Cost-Center Head) only when explicitly delegated on a VarianceAnalysis row
• Cannot edit BudgetLines directly, see peer-org budgets, or approve any step

Read-only access to BoardPacks, top-line dashboards, and the approved BudgetVersion summary. Used by board members and exec staff.

• Read on BoardPacks (Status: Approved or Distributed only), the top-line BudgetVersions summary fields (TotalRevenue, TotalOpEx, EBITDA — no per-line breakdown), Targets org-wide, RollingForecasts summary, and the org-level VarianceAnalyses rollup
• Cannot read BudgetLines per-cell, DriverValues, FluxComments, AssumptionsLog, or any draft / unapproved artifact

Read-only with full AssumptionsLog access for compliance and internal-audit work. Includes draft and approved artifacts.

• Read on every table including AssumptionsLog (full audit trail), Approvals (full approval history), BudgetTransfers (including drafts and rejections), prior superseded BudgetVersions, and all Scenarios lineage
• Cannot edit anything
• cannot delete
• no approval rights