Data Grants Processing and Conflict Resolution Rules
The following rules govern how data grants are processed and how row conflicts are resolved:
-
Default access for the dimension must be set to Read or None for all members to set a baseline for the data grants.
-
If you have two rows in the same data grant, the second (last) row takes precedence.
-
If a parent/child relationship assignment within a Data Grant presents a conflict, it is resolved by row order.
-
If you alter the sequence of rows within a data grant, you also change the effective permissions of that data grant.
-
When processing a data grant, it does not matter whether the designated user is an individual or a group.
-
If you have two different data grants for the same dimension, the least restrictive data grant takes precedence. In cases where there are conflicting rules between rows, the last row prevails.