cancel
Showing results for 
Search instead for 
Did you mean: 

Assigning access for combinations of dimension members

former_member219713
Participant
0 Kudos

Security Dilemma Example

Two Dimensions: Site and Department

Site Members Department Members

Site A Dept 1

Site B Dept 2

Site C Dept 3

Question: Is it possible in BPC version 4.2 SP4 to set up the following access for an user?

User A needs access to Site A and all departs only for Site A

User A needs access to Site B and only Dept 2 for Site B

User A needs access to Site C and only Dept 1 and 3 for Site C

My understanding is that if a user is given access to all departments, then he would be able to pull those depts for ALL sites he has access to. How can I assign access for combinations of members from different dimensions?

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

Hi,

Just to understand what you specified,

Site Members Department Members

Site A Dept 1

Site B Dept 2

Site C Dept 3

These 3 Dept's are there in all the 3 Sites. Is my understanding correct?

If that is the case, better would be to maintain 9 IDs for Dept dimension

Dept1_SiteA, Dept2_SiteA, Dept3_SiteA,

Dept1_SiteB............................................

...........................................Dept3_SiteC

That means you have 9 Dept members. Now it becomes very simple to assign access.

I dont think there is any way to assign security to combination of dimensions.

Hope this helps.

former_member219713
Participant
0 Kudos

Yes, your understanding is correct. However we have several hundred members in Site dimension and a hundred in Department. Creating a site_dept combination would result in more than 50,000 new dept members. Is BPC 4.2SP4 not capable of handling such security requirements? Does BPC 7's security model address this?

Thanks for your quick reply!

Former Member
0 Kudos

Hi,

I am sorry, but I dont think there is any provision to attain what you requested for.

You might have to change the structure of the dimensions. Because the member access profiles can be given on the dimensions and that will be applicable to every possible combination.

Hope this helps.