Note: | This functionality does not apply if Essbase Server is in EPM System security mode. |
By default, users and groups inherit the minimum permission that is set for an application or database. For example, if the minimum permission for an application is Read, all users who connect to the application have, at a minimum, read-only permission for all databases in the application.
If you have permissions to Create/Delete Users and Groups, you can grant a user or group permissions for a specific application or database that are higher than the application-level or database-level permissions. You can only grant permissions that are equal to or lower than your own.
You do not need to define application or database permissions for Administrators. Administrators are automatically granted Application Manager permissions to every application on an Essbase Server.
You can define user/group permissions from different perspectives:
To manage user/group permissions for applications and databases while editing user/group permissions:
From Enterprise View or a custom view, under an Essbase Server, expand the Security node.
Under the Security node, double-click the Users or Groups node.
In the Users window or the Groups window, select a user or group.
Right-click and select Edit properties.
If you selected a user, the User Properties window opens.
If you selected a group, the Group Properties window opens.
Note:
You cannot edit properties for multiple users or groups at one time.
Select App/Db Access and expand the Applications node.
If the user or group has Administrator permissions, the App/Db Access tab is not selectable because Administrators have full access to all applications and databases.
All applications and databases on the Essbase Server are displayed in a navigation tree. For each application and database, the current permissions for the user or group are displayed.
Click next to an application, and select a permission from the drop-down list box.
If you grant Application Manager permissions to the user or group, the databases in the tree below the selected application are not selectable because Application Managers have full access to all databases within the application.
To grant specific permissions to one or more databases in an application, select Access Databases as the application permission.
Expand the application node, and select a permission for each database.
If you selected Calculation as the user or group's database permission, you can specify which calculation scripts the user or group is allowed to execute. See Managing Calculation Permissions for Users and Groups.
If you want to assign a database filter to a user or group, below the appropriate database node, select Filter and select a filter from the drop-down list.
If you selected None as the database permission, the Filter option is not selectable.
A user or group can be assigned only one filter per database. For more information, see Managing Filters.
Click Apply.
To manage user/group permissions for applications and databases while working with applications or databases:
From Enterprise View or a custom view, select the application or database.
Right-click and select User/group access.
The User/Group Access window displays a hierarchical tree view of applications and databases on the left and tables of users or groups on the right.
Select a tab: Users or Groups.
Select the option to display all users or groups or to display only users or groups with permissions to access the selected application or database.
Select a user or group and click in the appropriate table cells to make assignments: Application access, Database access, Filters.
Note:
To make assignments for multiple users or groups, select the users/groups and click Edit. Then make assignments in the Edit User/Group Access dialog box.
To apply all assignments, click Apply.
To assign users or groups to another application or database, select the application or database from the left pane, then make the assignments.
When finished, click Close.