Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

Analysis Authorizations at Key Figure level

Former Member
0 Likes
578

Hi,

In our 2004s BI implementation, we have a speical need to restrict data access at Key Figure (KF) level. For instance, we have 3 KF in our sales cube called SALES QUANTITY, SALES COST, and SALES AMOUNT. We have 2 groups of users - first group is authorized to see all 3 KFs where as the second group is NOT authorized to see SALES AMOUNT. How can we achieve this in 2004s BI security? Have you come across this kind of security/authorization/access implementation?

Of course, I can create 2 Multi-providers one for each gorup of users and control the security. Or I can build 2 different queries to our users and handle this request.

My question is, "Is there any way we can achieve this kind of security using just one Cube and one Query?" In other words, can we use Analysis Authorization objects to control this kind of access? If so, how? Or any other way to acheive our needs?

Thanks

Jay Lakshmanan

1 ACCEPTED SOLUTION
Read only

Former Member
0 Likes
465

Hi,

1) Create 6 authorization analysis like:

- YSALESQTY__001_ALL:

0TCAACTVT=*

0TCAIPROV= Zcube

0TCAKYFNM= *

0TCAVALID=*

- YSALESQTY_002_XXX:

0TCAACTVT=*

0TCAIPROV= Zcube

0TCAKYFNM= ZKEYFIGUR

0TCAVALID=*

2) Repeat for all your KF

3 Insert Autho Analysis in Role (S_RS_AUTH)

- YSALES_ALL

-YSALES_Restrict

Hope it help's

Hi,

In our 2004s BI implementation, we have a speical need to restrict data access at Key Figure (KF) level. For instance, we have 3 KF in our sales cube called SALES QUANTITY, SALES COST, and SALES AMOUNT. We have 2 groups of users - first group is authorized to see all 3 KFs where as the second group is NOT authorized to see SALES AMOUNT. How can we achieve this in 2004s BI security? Have you come across this kind of security/authorization/access implementation?

Of course, I can create 2 Multi-providers one for each gorup of users and control the security. Or I can build 2 different queries to our users and handle this request.

My question is, "Is there any way we can achieve this kind of security using just one Cube and one Query?" In other words, can we use Analysis Authorization objects to control this kind of access? If so, how? Or any other way to acheive our needs?

Thanks

Jay Lakshmanan

2 REPLIES 2
Read only

Former Member
0 Likes
466

Hi,

1) Create 6 authorization analysis like:

- YSALESQTY__001_ALL:

0TCAACTVT=*

0TCAIPROV= Zcube

0TCAKYFNM= *

0TCAVALID=*

- YSALESQTY_002_XXX:

0TCAACTVT=*

0TCAIPROV= Zcube

0TCAKYFNM= ZKEYFIGUR

0TCAVALID=*

2) Repeat for all your KF

3 Insert Autho Analysis in Role (S_RS_AUTH)

- YSALES_ALL

-YSALES_Restrict

Hope it help's

Read only

0 Likes
465

Thank you very much!! It helps.

Jay