Security in BPC

[Former Member]

Hi,

Is there any way that we can give access to Member Access Profiles or Data Access Profiles without giving access to Task Profiles in BPC NW?

Thanks

[Former Member]

Hi,

Maintenance of the data access profile and task profile are independent of each other.

You can create a new data access profile for a user and assign without assigning task profile. However, the user will not be able to do any activity in the BPC system.

The purpose of task profile is to give the authorizations for different types of activities - saving data, running DM packages, etc.

Whereas, the purpose of data access profile is to provide the authorization at the data level.

So, if a user has authorization to some data, but if the user doesn't have authorization to execute any activity in BPC, then its of no use.

Hope you got the idea.

[Former Member]

Hi Nilanjan / Kirill,

Thank you for your responses. Let me be clear with my question.

If we assign 'Manage Security' task to any user, that user can manage both Task Profiles and Data Access Profiles. But, my requirement is to restrict the user to manage Data Access Profiles only, but not task profiles. Is there any way to achieve this from frontend or backend BW?

Thanks

[former_member186498]

Hi,

as Kirill wrote you cannot give access to manage Data Access Profiles only, he suggest also to give a suggestion in the IdeaPlace https://ideaplace.brightidea.com/ct/s.bix?c=6F68E3FC-EED4-4ADA-B675-0E6411EAB7E8

Kind regards

     Roberto

[Former Member]

Hi,

This is not possible.

The authorization object is manage security, with which the user can manage all the components of the security.

Hope this helps.

[kirill_gromyko]

Hello,

Currently it is defined by Manage Security task. It does not differentiate access to task or data access profiles.

You can contact BPC NW Product Owner team with the suggestion through IdeaPlace.

Kind Regards,

Kirill