It is possible to restrict data access in SAC based on the Role Base Permission defined in SF?

[Vmote26]

Hi,

Connection has being established between SF and SAC, new role and user was created specifically for SAC assigning only the fields to expose to SAC, but it is not working, when I try to build a query the error shows this

• Vm TEst has failed to upload because the query returned an empty dataset. Please check your datasource and try again.
• Correlation ID: 13918401-3564-4844-9973-449678272102

After this I added permission on SF "Employee Central HRIS OData API (read-only), the problem is now ALL data from SF is exposed in SAC because the permission I added bypass all permissions and return all data. 2639949 - OData API is not respecting the Role Based Permission Settings (sap.com)

Is there any way to control the date to be exposed from SF to SAC?

Thanks

[Vmote26]

Hi Martijn,

Currently I have a case with SAP checking on this issue. I found this which I believe is the option that your are mention Data Access Control in SAP Analytics Cloud | SAP Blogs is this right?

In the other hand hopefully SAP find a way to solve the RBP in native integration.

Kind Regards

[mfoeken]

Hi Vladimir,

The native live connection to SF in SAC can potentially solve the issue but I'm not sure about the possible limitations. In the current import scenario the only option, if RB permissions are not respected during data acquisition is to setup data access control on specific dimension(s) and partially rebuild authorization using teams in SAC.

Kind regards,

Martijn van Foeken | Interdobs

[Vmote26]

Hi Prathamesh

Integration was done as described in the link above.

Beginner’s Guide to SAP Analytics Cloud for SuccessFactors | SAP Blogs

APOS Live data gateway is this way allow then to restrict the data from SF side?

Thanks for your answer.

Vlad

[PrathameshA]

Hello,

Is this an Acquired data connection to SF ?

I know that SAP was going to release Live connection to SF in H2 2021, not sure whether this connectivity option will be relevant in your case.

Otherwise using APOS Live data gateway is another option, depending on the use case.

Thanks,

Prathamesh