When does security take effect on chart of accounts value sets for balances cubes?

To enforce segment value security according to defined security policies, you must enable security on the value set before you publish the affected account hierarchies to the balances cube.

Likewise, to stop enforcing segment value security for a previously secured value set, you must disable security on the value set and then republish the account hierarchies.

Once segment value security is enforced, you don't have to republish account hierarchies if you define new security policies or modify existing policies for the secured value set, even if the security definition has hierarchical conditions that use parent values.

Note: If you change an account hierarchy that's already published, you must republish to reflect the updated hierarchy in the balances cube. Use the Publish Account Hierarchy task to republish the tree version. Republishing the account hierarchy also ensures proper enforcement of security policies that are based on parent values included in the changed hierarchy.