Technology Blogs by Members
Explore a vibrant mix of technical expertise, industry insights, and tech buzz in member blogs covering SAP products, technology, and events. Get in the mix!
cancel
Showing results for 
Search instead for 
Did you mean: 
paddyw
Participant
1,730

Following up on my previous blogs, this is the last blog that will show a step-by-step configuration for the 'Hierarchy' DAC and the outcome of the configuration, it is quite useful functionality especially when we want to apply security on an organization or gl account dimension

The other two types of DAC configuration are explained in the other two blogs

Blog of  

Disclaimer: all the data created are for demo purposes, the approach is used to demo the functionality of the DAC configuration, not intended for production design or usage

  • Hierarchy DAC

We will first create a hierarchy view with a parent-child structure, below is the hierarchy structure

paddyw_0-1717329874069.png

This is the hierarchy view

paddyw_1-1717332124628.png

Let's create a dimension that contains all the suburbs, cities, states, and country, my ID was only assigned to NSW, and the dimension is associated with hierarchy view

paddyw_3-1717335992138.png

Create a DAC view

paddyw_5-1717337433259.png

Insert one record with my ID only assigned to NSW node

paddyw_6-1717337887447.png

Create a Data Access Control artifact and select the DAC hierarchy view, select the hierarchy entity and Criterion Column from created DAC hierarchy view

paddyw_0-1717340126804.png

 

Create a fact view that has costs assigned to each leaf

paddyw_4-1717336819485.png

In the fact view, associate to dimension view and apply Data Access 

paddyw_7-1717338621905.png

 

Create an Analytics model on top of the fact view

paddyw_8-1717339033524.png

Go to SAP Analytics cloud and create a simple story on top of the analytical model, we can see only NSW node and its children posting visible to my user ID

paddyw_2-1717333867993.png

This is my blog on DAC of SAP Datasphere, feel free to comment and ask any questions you may have, thank you for your time

 

 

 

 

2 Comments
SCN
Explorer
0 Kudos

@paddyw great article. Quick question: Are the access control table and DAC stored in the Space with the view? How can one safeguard these two so that other users of the space do not tamper or edit them, thereby compromising security?

paddyw
Participant
0 Kudos

@SCN according to SAP's guideline, the best practise is to create a separate space and define DAC table in that space, and only share view access to the other business space(FI/HR and etc), Please find the screenshot from SAP guideline:

Screenshot 2024-10-16 085138.jpg

Labels in this area