The way measures work, you typically are accessed to enter measures for the particular area of the organization. You're then given access by role to be able to enter Actuals, Targets both, or or none. HR metrics would be secured at the HR area of the company - unless the metrics are HR metrics for particular divisions of the org, in which case you'd have access to enter metrics for the division.
However, PMF 4 doesn't give the ability to select which measures by name an individual user can enter. It allows Dimensional filtering only. So a person who has access to the department's data could potentially enter any measure for that department. In PMF your control over who can enter what is (1) the functional role (2) the dimensional access (3) whether it's a user-entered type measure (4) whether the measure has Row Security active.
As you can see, to be user-enterable, measures have to be specifically designated as user-entered. Not every measure would be. In our experience it's usually fewer than 5% of the entire set of measures that would need to be user-entered. But of course your mileage can vary.
PMF 5 will give more control - you'll be able to determine what a user can DO by scorecard. Access control by scorecard will enable the measures on the scorecard to be accessible by scorecard role (a new construct in PMF 5).
Hope this information helps.
Bob Jude Ferrante
Director of Business and Development
WebFOCUS Performance Management
Bob_Ferrante@ibi.com
917-339-5105
I'll take any questions about PMF - business or technical - anytime!