SAC - Data Access control for Measure and Dimension

[debasish_panda]

Hi,

I have a requirement to restrict the access of data (based on the combination of values in Dimension and Measure). Can we have a security access maintained in SAC, where in User X can see both Qty and Sales price of Product Category A , whereas User Y can see only Qty for Product category B ? I tried to create 2 roles based on the above need (1 for dimension access control and other for Account (measure access control). When I assign both roles it takes a combination of both using OR operator. How can I restrict it using an AND operator ?

Example :

The sales prices for product are as follows:

Product Category

Prod Name

Qty

Sales price

A

ABC

10

$500

B

PQR

20

$700

Any guidance to achieve it using a BW live or import connection is appreciated !

Thanks, Debasish

[William_Yu]

First of all remove all data access control on dimension level, only switch model privacy in model preference

Create two role:

1. account sales price/qty and Category A: Read

2. account qty and Category B : Read

Assign role 1 to user Y

[JefB]

Should work. Only be aware that data point commenting might not be possible anymore with this approach.

Also this forces you to use account dimension, because measures cannot be used in any security setting like DAC or model privacy rules at all.

[debasish_panda]

The trick was to add both dimension and account level access control in one row instead of in 2 separate rows.

Thanks for your suggestion !