How to create Row level Security on user groups in Datasphere

[aczeitner]

Hey Specs,

I've two questions.

I am digging deep into the Topic of the Row Level security.

I've two problem and I am unable to find blog or documentations on it.

Is there a way to assign the Dac object so the row level security to user groups ? 
It makes no sense to assign row level security users. We have around 300 users. If i need to do excel for each reports for each functional area then that would be to much manualyti so I would like to create roles for row level sec.


Is there a way to create row level security for a list of values like hierarchy nodes or list of distinct values withouth duplicating rows ?  
Now as far as I know if I want give access to multiple values for an user I need to duplicate each user's by the number of distinct values. So if an user can access 300 costcenter then I need to create a table where the user is duplicated by 300 rows for each distinct costcenter. But that would be a nightmare.

[ClemSteich · Accepted solution]

Hi,

Is there a way to assign the Dac object so the row level security to user groups ? 

Sure, you can create one local table for the user/user group assignment and another table for the user group/row security assignments and then join the 2 tables in a view which will be used in your DAC.

Is there a way to create row level security for a list of values like hierarchy nodes or list of distinct values withouth duplicating rows ?  

I think what you are looking for are the Operators and values and Hierarchy Data Access Control features.

Best regards,

Clément

[Martin_Kuma · Accepted solution]

exaclty. New feature in DSP since ?Jun?July?August? using wild-cards. You may also consider aggregation of the authorization-fields to reduce the complexity of the SQLs, do have the fields persisted, no assocs, however

[aczeitner · Accepted solution]

Thanks this worked well 🙂

[MelCalucin]

With regards to hierarchies, take a look at the DAC for CDS view I_PROFITCENTERHIERARCHY.  Again this is only if you have S/4HANA.

Regards,

Mel Calucin

[MelCalucin]

If you have S/4, you can create a CDS view using the tables usrbf2 and ust12 to get a list of users who have access on S/4 for certain cost centers.  You can then use this CDS view in Datasphere for your DAC.  

Regards,

Mel Calucin