Data access profile: rights on base level are ok but not on aggregate level?

[alexandresamuel]

Hi experts,

I have a problem about data access profile with SAP BPC 10.1 NW.

I have tried several possibilities about my following problem:

I use 2 hierarchies on my model for Entity dimension:

Exemple:

H1: OPERATIONAL:

ATTI (node) = 150

BU1A (children) (properties DROIT_STE = ATTI) = 100

BU1B (children) (properties DROIT_STE = ATTI) = 50

H2: ORGANISATION (GROUPE_CENTRALE)

E1 (node) = 120

BU1A (children) (properties DROIT_STE = ATTI) = 100

BU1C (children) (properties DROIT_STE = PARI) =20

E2 (node) = 80

BU1B (children) (properties DROIT_STE = ATTI) =50

BU1D (children) (properties DROIT_STE = PARI) = 30

On hierarchy H1, I gave rights to read/write on ATTI and descendants to have rights on BU1A and BU1B => Ok

On hierarchy H2, I need to see all my hierarchy but only read/write datas on BU1A and BU1B.

For example, if I create a report on E2 (Node) member, I should have rights only on BU1B, so I'm expected to see only 50 amount on this member but unfortunately I see 80 amount.

I have attributed following rights for H2: (cf Attachment)

Read Only for All hierarchy H2.

Read and Write for Property Call = ATTI

No rights for Property Call = PARI

How can I configure rights to have expecting results?

Thanks for help.

[former_member186338 · Accepted solution]

Hi Samuel,

"For example, if I create a report on E2 (Node) member, I should have rights only on BU1B, so I'm expected to see only 50 amount on this member but unfortunately I see 80 amount." Security is not about aggregation, security is about visibility 80 is correct!

Vadim

[damovand]

Hello,

If I understand your requirement correctly, you need some members in H2 to be read/write accessible and some others to be Read only accessible.  If that is the case you can't set the access at H2 level.  You have to it on individual level.

Regards,

Leila