Using Model Permissions

Overview

Provide access permission for user groups. A description of each field on the Model Permissions page (accessed by selecting the Manage task and the Application Administration - Model Permissions subtask) is provided below based on access type (model versus dimension).

Dimension Access

You can use the drop-downs on each cell to make your Group, Dimension, Filter, and Value selections. If you use the drop-downs to select the Group, Dimension, and Filter columns, then the Value drop-down will be populated for you. If you simply type the values in the previous columns, the Value drop-down is not populated.

Tip:

For second and following rows of the permissions table, if there is no drop-down in column A, then copy the drop-down from the previous row, column A in the Group section to the rows beneath.

Group

Select the group for which you want to provide security access.

Dimension

The dimensions that are part of the model selected are available. Select or enter a dimension to secure for the selected group. You can add multiple rows of security for each dimension. For example, you use the MemberAndBelow filter on Income Statement and Balance Sheet dimension members in the following hierarchical structure:

Account Main
Income Statement
Operating Income
Operating Expense
Balance Sheet
Assets
Liabilities
Statistical

The group will have access to Income Statement, Operating Income, Operating Expense, Balance Sheet, Assets, and Liabilities. The group will not have access to Statistical.

Filter

Identify members you want to provide security access to.

MemberandBelow – Access to all dimension members at a specified level where a member name exists, as well as all members below that level in the hierarchy for the selected group.
FixedMember – Access for the group is applied for a selected dimension member.

Value

Specify the member, or value, based on the selection in the Filter field. For example, if you selected FixedMember as the Filter and the Dimension is Scenario, you might specify Actual as the value. This way, the group will have access to the Actual scenario only.

Tip:

If you use the drop-downs to select the Group, Dimension, and Filter columns, then the Value drop-down will be populated for you. If you simply type the values in the previous columns, the Value drop-down is not populated.

Understanding Dimension Security

If a Reviewer or Contributor user tries to open a view or report which contains a dimension member that the user does not have permission to access, the view or report opens and dimensions for which the user can view are displayed. A Power user defines the views and reports to be shared with Reviewers and Contributors. The Reviewer or Contributor can open the report or view, and dimension security established by the Power user.

Example: If a Power user creates a view or report with a Department dimension filter (e.g., Sales) and selects the "All Departments" member, the reviewer will see only Sales data.

Note:

This enhancement is applicable only to dimensions defined as filters or POVs in the view or report.