TM1 Forum

Hi all,

I need to enforce dimension security on a Product dimension. The Product dim is structured such that it also encompasses the organisation hierarchy since the product n-element is unique to the department. Here's how it looks like:
Level 1: Company
Level 2: Department
Level 3: Product Group
Level 4: model which is n-element

The user groups will be set up at product group level. However, there are a few thousands models under some product groups. Thus, it is not possible for Admin to maintain dimension security through TM1 front-end. Can I write a rule in the element security cube for this dimension such that Admin can manual assign a WRITE access at the Department or Product Group c-element, and all its children (be it c or n-elements) will be automatically populated with WRITE access?

I have previously used rule to match the name of the User Group with an attribute in the elements. If both match, WRITE will be assigned. However, I notice that the rule-applied access does not show up at the front-end (i.e. when Admin right-clicks on the dimension and select Dimension Security Assignment). The rule seems to only be effected when Admin manually does an assignment in the front-end and save, and this action will then trigger the rule to apply to every cell in the element security cube to show up at the front-end. once this shows up, the end-user will then see the assigned elements when he logins in.

Any advice on the rules to apply to the children, and any experience in using rules on element security will be greatly appreciated! Thanks!

harrytm1 wrote:Hi all,

I need to enforce dimension security on a Product dimension. The Product dim is structured such that it also encompasses the organisation hierarchy since the product n-element is unique to the department. Here's how it looks like:
Level 1: Company
Level 2: Department
Level 3: Product Group
Level 4: model which is n-element

The user groups will be set up at product group level. However, there are a few thousands models under some product groups. Thus, it is not possible for Admin to maintain dimension security through TM1 front-end. Can I write a rule in the element security cube for this dimension such that Admin can manual assign a WRITE access at the Department or Product Group c-element, and all its children (be it c or n-elements) will be automatically populated with WRITE access?

We use something similar.
There's a block like that for each business unit grouping.

We don't use skipcheck.

When we add a new business unit, we do have to run a TI which executes the SecurityRefresh; command, though.

thanks, Alan. you're the man!

As per your advice, this would mean that the Security Refresh through TI will solve the 2nd issue i had.