SAP IBP - issue when combining 2 permission filter

[jeanluchospital]

Hi,

I use a role which restrict the write and read access on specific key figures (KF1, KF2, KF3).

A user has this role with a permission filter which allows him to read on a specific geography scope (Country France for instance).

I wanted to adjust his permission so that he can write on KF1 only for a specific product scope (Product A) but keep writing on all other key figures for his geo scope- for that I have created another permission filter with :

-Filter criteria for read access Country = France

-restricted write access for KF1

-and filter criteria for write access with Product =A

I have then given him the 2 permission filters.

As a result, the user can see only France as expected, he can see all products has expected, but he can write on KF1 for any product, whereas I was expecting him to have the possibility to write only on Product A.

Any idea on how to solve my issue ?

Many thanks,

BR,

Jean-Luc

[jeanluchospital]

Thanks to all for your comments - the only solution we found is to have 2 different filters with scope which don't intersect - as when we apply 2 filters on a user, it does the UNION of both filters -

This is what we did :

Filter 1 : France, Product A, write only KF1,

Filter 2 : France, all other Products but Product A, write on the other KF the user is entitled but KF1

Of course this solution is not nice at all, if we have many permission filter to update (for instance that the Product A restriction on a specific KF must be applied on 100 filters...)

BR,

Jean-Luc

[riyazahmed_ca2]

Hi Jean,

We don't have a solution yet on conflicting Permission Filters. Normally we manage such cases with the manual agreement with users on keeping up the discipline of keyfigure changes.

Best Regards,

Riyaz

[abhinay_kumar]

Try maintaining Global Configuration Parameter- USE_WRITE_PERMISSION.

[former_member804657]

Hi Jean-Luc,

For that role did you activate the permission filter? Please assign the permission filter (Specific/Unrestricted) in the General section for both write and read access in the role.

Your permission filter setup is already fine, you can achieve this just in one permission filter.

Hope this helps.

Sittinut