Data Access Control in SAP Datasphere - Operator and values DAC

[paddyw]

Following up on my previous blog, this article will show a step-by-step configuration for the 'Operator and values' DAC and the outcome of the configuration

The other two types of DAC configuration are explained in the other two blogs

Blog of  

• Single value DAC
• Operator and values DAC
• Hierarchy DAC

Disclaimer: all the data created are for demo purposes, the approach is used to demo the functionality of the DAC configuration, not intended for production design or usage

• Operator and values DAC aka Multiple value DAC 

First two steps are similar to the single value DAC blog, we first create a dimension view based on a local table, there are four countries in place

Then create a local fact table containing transaction data posted against four different counties, with different types of spending

Create a local table that serves as DAC multi-value filter

Let's explain the table column in detail, imagine this table to the comparable 'range table' in SAP 

1. The masked part is the email ID

2. 'Restriction' column serves the condition as 'OR' & 'AND'. If two or more lines value are the same, it's consider as 'AND', otherwise it's AND

3. 'Criterion' column is the 'column' that exists in the fact table where we want to put the filter on

4. 'Operator' is straightforward, it accepts most of the Operator values, EQ, GT, LT, LE, etc, for detailed operator values, please refer to SAP online help. 

5. First value and Second value served as a range: LOW, HIGH.

Go to define Data Access Control section and create a DAC artifact, select the DAC multi-value as source

Criteria section is self-explained, screenshot below for reference

Create a fact view using the transaction data local table and add DAC multi-value table, when we browse data from the local table, we can see all the data for each type, while browsing data on the fact view, we can only see the TYPE of spending (nuclear and water)  which we defined in the DAC multi-value table

Local table view:

Fact view has DAC configured and will apply the Multi-filter automatically:

This is the end-to-end configuration of 'Operator and Value' DAC.  In the next blog, I will share the end-to-end configuration of Hierarchy DAC. Please feel free to share your comments or any questions you may have. Thank you