When does security take effect on chart of accounts value sets for balances cubes?

To enforce segment value security according to defined security policies, you must publish an account hierarchy to the balances cube after enabling security for its value set.

If you disable security for that value set, you must likewise publish its account hierarchy to the balances cube to register that security is no longer enabled for it.

Once segment value security is enforced, you don't have to republish account hierarchies if you define new security policies or modify existing policies for the secured value set, even if the security definition has hierarchical conditions that use parent values.