TM1 Contributor - How to restrict access for specific items

[cbrandt]

Hi,

I am trying to figure out what is the best way to achieve the following:
It's a quite common scenario and in EP we used Access Tables for that. Let's say you have a list of 100 employees and 20 cost centres. Cost centres will be the Approval hierarchy (eList). You want to make sure that when cost centre manager opens it's cost centre in Contributor the list of employees is filtered to show only the employees that belong to that cost center. Same concept could happen with Products, etc.

What I have tried so far:
I created rule based security that apllied "None" to the relevant "Cost center <> Employee" combination. Security works, but it doesn't hide the irelevant employees. You just can't see and enter data against them. But I don't want to see them at all.

Ideas: Create dynamic subsets and link them to the particular cost center. Not 100% if that is possible though.

This must be a common concept in the TM1 world, so I am interested in how you guys usually approach this.

Thank you!
Carsten

[lotsaram]

Hi Carsten,

What you want to use to achieve this is Element security not Cell security

[cbrandt]

Thanks Lotsa,

That however doesn't allow 2dimensional security.
I.e. If a user has access to 2 cost centres, he will see in each cost center all his employees, whereas he should only see the employess relevant for each cost center.
Hope that makes sense.

[lotsaram]

I get where you're coming from but from a pure "security" perspective if the user has access to 2 cost centres then it is correct to see employees for both.

I'm not yet up with how to manage this with contributor picklists and default hierarchies but you could easily default access to only the relevant list of employees by creating a subsets for cost centres. i.e. a little bit of user training vs. a lot of working around ... of course you can't always beat user stupidity if someone goes out of their way to change the subset to the wrong cost centre...

[sammy7]

Hi Carsten,

I would like to follow up on this thread as I just came up with the same question. I did successfully try the ElementSecurity by dimension but still are looking for a way of assigning multi-dimensional access with really hiding the elements in the Contributor.

Did you find a way to solve this "problem"?

Regards,
Sascha

[vins]

Hi ,

I would like to follow up on this thread as I just came up with the same question. I am still looking for a way of assigning multi-dimensional access with really hiding the elements in the Contributor.

Did you find a way to solve this "problem"?


I have tried using dynamic subset for now but other elements are not hidden from the user if they goto subset editor and do subset all or select any other subset.
Is there a way to restrict the user from selecting other subset or clicking "subset all" in Subset editor in Contributor?

Regards,
Vins