How to Set Up Plan Type Security

Direct Answer: How to Set Up Plan Type Security in OnePlan

To set up plan type security in OnePlan, edit or create a plan type and open the Security tab of the Edit Plan Type form. Select the + next to Groups, choose an Enterprise Security Group in the Group column, check Add Plans, and select Save. Only the groups you add can create plans of that plan type.

What This Article Covers: Plan Type Security

This article explains how to control which Enterprise Security Groups can create plans of a plan type, and how those settings relate to private plans.

What you will accomplish You will limit plan creation for a plan type to the Enterprise Security Groups you choose.

Before You Begin: Plan Type Security

You need access to the admin Configuration area.
The Enterprise Security Groups you want to use must already exist. See Configure and Manage Enterprise Security Groups.
The plan type must exist, or you can create it as part of these steps. See Create and Update Plan Types.

Why This Matters: Plan Type Security

Context: Controlling Who Can Create Plans of a Type

Plan type security lets you set permissions at the plan type level so only selected Enterprise Security Groups can create plans of that type. For example, you can allow project managers to create projects only, while program managers can also create programs. This gives you precise control over plan creation, which supports governance and collaboration.

Note: If no groups are added, all users with global create plan permissions can create plans of this plan type.

Step-by-Step: Setting Up Plan Type Security in OnePlan

Task: Open the Security Tab

Go to Configuration > General and select the Plan Types tab.
Select the Edit icon for the plan type, or select Add Type to create a new one.
In the Edit Plan Type form, select the Security tab.

Task: Allow a Group to Create Plans of This Type

On the Security tab, select the + next to Groups. A row is added to the Groups table.
In the Group column, select the Enterprise Security Group you want to allow.
Check Add Plans to let the group create plans of this plan type.
Repeat for each group you want to allow.
Select Save.

## How Private Plans Interact with Plan Type Security

Plan type security and private plans are separate controls that work together. Plan type security controls who can create plans of a plan type. Private plans control who can access an individual plan after it is created. Both are on the Security tab of the Edit Plan Type form.

Creating plans is not affected by turning on private plans. Selecting Enable Private Plans for this plan type does not change which Enterprise Security Groups can create plans of that type. The Add Plans settings above continue to decide who can create them.
Creating a plan does not grant access to others’ private plans. A user who is allowed to create plans of a type does not gain access to other users’ private plans of that type.
Private plan access takes precedence over general permissions. Global permissions such as View All Plans, Edit All Plans, and Administrative do not necessarily provide access to the contents of a private plan. Only users and teams in the plan’s Shared With access can find and open it. Users with the global Edit All Plans permission who are included in a private plan’s Shared With access have Owner access to that plan by default.
Enabling private plans does not make existing plans private. It makes the Private Plan option available in Shared With for plans of that type. A plan owner then makes individual plans private.
Private plans do not inherit access from parent plans. Users who can create a plan under a parent plan only because of their access to that parent must also be added directly to the Shared With access of any private plan they need to open.
Reorganizing requires a plan type that supports private plans. A private plan can be moved to another plan type only if the destination plan type has private plans enabled. Otherwise, the plan must be made public first.

For setup steps, see How to Enable Private Plans for a Plan Type in OnePlan. For how private plans behave across OnePlan, see Private Plans in OnePlan - Overview.

Frequently Asked Questions: Plan Type Security

Q: How do I control who can create plans of a specific plan type in OnePlan? A: In OnePlan, open the Security tab of the Edit Plan Type form, add the Enterprise Security Groups that should create plans of that type, check Add Plans for each, and select Save.

Q: What happens if I do not add any groups on the Security tab in OnePlan? A: In OnePlan, if no groups are added, all users with global create plan permissions can create plans of that plan type.

Q: Does enabling private plans change who can create plans in OnePlan? A: No. In OnePlan, enabling private plans for a plan type does not change which groups can create plans of that type. The Add Plans settings on the Security tab continue to control plan creation.

What to Do Next: Plan Type Security

Configure related plan type settings: