Data Grants Processing and Conflict Resolution Rules

The following rules govern how data grants are processed and how row conflicts are resolved:

  • Default access for the dimension must be set to Read or None for all members to set a baseline for the data grants.

  • If you have two rows in the same data grant, the second (last) row takes precedence.

  • If a parent/child relationship assignment within a Data Grant presents a conflict, it is resolved by row order.

  • If you alter the sequence of rows within a data grant, you also change the effective permissions of that data grant.

  • When processing a data grant, it does not matter whether the designated user is an individual or a group.

  • If you have two different data grants for the same dimension, the least restrictive data grant takes precedence. In cases where there are conflicting rules between rows, the last row prevails.