03-12-2007 5:56 PM
Hi,
In our 2004s BI implementation, we have a speical need to restrict data access at Key Figure (KF) level. For instance, we have 3 KF in our sales cube called SALES QUANTITY, SALES COST, and SALES AMOUNT. We have 2 groups of users - first group is authorized to see all 3 KFs where as the second group is NOT authorized to see SALES AMOUNT. How can we achieve this in 2004s BI security? Have you come across this kind of security/authorization/access implementation?
Of course, I can create 2 Multi-providers one for each gorup of users and control the security. Or I can build 2 different queries to our users and handle this request.
My question is, "Is there any way we can achieve this kind of security using just one Cube and one Query?" In other words, can we use Analysis Authorization objects to control this kind of access? If so, how? Or any other way to acheive our needs?
Thanks
Jay Lakshmanan
03-13-2007 7:26 AM
Hi,
1) Create 6 authorization analysis like:
- YSALESQTY__001_ALL:
0TCAACTVT=*
0TCAIPROV= Zcube
0TCAKYFNM= *
0TCAVALID=*
- YSALESQTY_002_XXX:
0TCAACTVT=*
0TCAIPROV= Zcube
0TCAKYFNM= ZKEYFIGUR
0TCAVALID=*
2) Repeat for all your KF
3 Insert Autho Analysis in Role (S_RS_AUTH)
- YSALES_ALL
-YSALES_Restrict
Hope it help's
03-13-2007 7:26 AM
Hi,
1) Create 6 authorization analysis like:
- YSALESQTY__001_ALL:
0TCAACTVT=*
0TCAIPROV= Zcube
0TCAKYFNM= *
0TCAVALID=*
- YSALESQTY_002_XXX:
0TCAACTVT=*
0TCAIPROV= Zcube
0TCAKYFNM= ZKEYFIGUR
0TCAVALID=*
2) Repeat for all your KF
3 Insert Autho Analysis in Role (S_RS_AUTH)
- YSALES_ALL
-YSALES_Restrict
Hope it help's
03-14-2007 12:11 AM