In order to optimise the way profile acess is granted, especially on huge groups with several reportings based on different reponsability scopes, having the possibility to grant acess dynamically to a group of entity based on a property would be a significant gain.
As an example on entities, if you want to grant acess to entities that are spread across default entity hierarchy :
- Actually :
- on integration phase you have to manually add each unique entity one by one to each role ⇒ leading to possible issue / miss click…
- on exploitation, if the group add new entities or acquire a group, you have to add manually the entity to each related role
Improvement proposed :
1/ Transversal access across all hierarchies based on leaf members :
- Grant access to ALL hierarchies leaf members if you base acess on a specific hierarchy meant to be used for access purpose.
This way access can be granted dynamically. Each time you add a new dimension member, by using a specific hierarchy, the access is automatically granted for the leaf values on each hierarchy.
2/ Grant access using a property :
- Base acess on a property, the same way it is possible to filter a property on bursting or model view
This way access can be granted dynamically. Each time you add a new dimension member, by using property, the access is automatically added to roles that are based on this property
This two improvements avoid :
- User maintenance per hierarchy. Basically, when a user has access to a value, this should be granted whatever the hierarchy concerned (except if needed)
- Micro access management for user with access to grant across several hierarchies
Regards,
