Access to an individual Budget Account Number can be controlled. Account Level security is turned on at the Budget Account Number level and is assigned at the Budget Account Number level. In comparison "Sensitive Levels" and "Sensitive" is turned on at the Object and Budget Account Number level respectively but is assigned at the OrgUnit level. Please see When and Why Do I Use "Sensitive Levels" and/or "Sensitive"? and How does the "Sensitive" Security Hierarchy Works - (Why Don't I See Data)?
For example, Budget Account Numbers 000-4115-02 and 000-4116-01 have both been given "Sensitive Level 2" and have been designed as "Sensitive". When a user is designed "Sensitive Level 2", "Sensitive Summary" and "Sensitive Details" for OrgUnit 000, they would be able to view the data for both Budget Account Numbers. However if Budget Account Number security it turned on, by deselecting 000-4116-01 at the Account Level security, they will not be able to view this Budget Account Number.
Account level security is activated in App Config/Menu Editor/Application Configuration tab. To activate enter 1. To deactivate enter 0. Click "Save Configuration Changes" after your selection.
When Account Level Security is activated an additional column entitled "Accounts" appears to the far right of the Assign User Permissions/OrgUnit Permissions tab. Below is the OrgUnit Permissions tab for User1, who will use in our example:
1) To edit account Drill down into the "Accounts" for an OrgUnit and the following screen appears - namely - a listing of Budget Account Numbers for the OrgUnit. In our example, User1 has access to OrgUnit "000" and below its Budget Account numbers are listed.
2. Select the Budget Account Number/s you wish to user to have access to or deselect the account you wish the user not to access to; and
3. Click "Save User Accounts".
In our example, User1 was given access to 000-4115-02 but not access to 000-4116-01.