Question Re: Data Access Control in Modeler in SAP Analytics Cloud in Technology Q&A

Data Access Control in Modeler in SAP Analytics Cloud

Kristina33 — Fri, 19 Jul 2024 10:15:42 GMT

Hi all,

Is it possible to have Data Access Control for data from model on SAC with same approach as we have in Datasphere? Model on SAC is with imported data not via live connection.

I have concept of authorization based on dimensions with so many values and there is so many users. For example, each Project Manager should see data only for one or more Projects, but dimension Project has over 5000 values and it's not possible to maintain it manually like on the screenshot below.

And this is not only issue, but many Users have more than one dimension that his authorizations are based on. Is it possible to implement this concept of data access control in SAC? Below is preview of authorization concept from Datasphere.

Thanks in advance!

Re: Data Access Control in Modeler in SAP Analytics Cloud

MichalCK — Fri, 19 Jul 2024 10:47:17 GMT

proper authorization setup for SAC import model would involve creating Teams, assigning users to those teams (e.g. done automatically through connection with AD groups), and assigning teams to relevant projects.
But in your case, I would consider loading the Read and Write columns directly with user IDs from the Datasphere view to SAC dimension through oData connection.

Re: Data Access Control in Modeler in SAP Analytics Cloud

William_Yu1 — Mon, 22 Jul 2024 02:10:13 GMT

Hi Kristina33 ,

Have you checked model privacy concept of SAC? It allows you to define data security cross multiple dimensions.

https://help.sap.com/doc/00f68c2e08b941f081002fd3691d86a7/2023.11/en-US/b450f5f7946340fd8240e14f5258caae.html

Best regards, William

Re: Data Access Control in Modeler in SAP Analytics Cloud

Kristina33 — Mon, 22 Jul 2024 12:12:00 GMT

Hi William, thank you for advice but for instance I have a dimension Project with more than 5000 values and for each value I have bunch of users assigned on them. Each user has to see only project/projects he assigned on. Also, there is business units and countries that have same logic as projects, and it's so much manually work if I follow this approach so it's not useful for me unfortunately.

Re: Data Access Control in Modeler in SAP Analytics Cloud

William_Yu1 — Tue, 23 Jul 2024 03:32:42 GMT

Then not really sure how you would like to define your data security