20.2 Managing Data Access Rules

This section allows you to Create, Edit, View and Delete Data Access Rules in the AFCS application.

To create a data access rule, follow these steps:

1. Login to the AFCS application.
2. On the Home page, navigate to Administration and select Information Access Management tab.
3. From the Data Access Rules page, click Create to create a new data access rule. The Create Access Rule window is displayed.
4. Enter information in the following fields.

   Table 20-2 Data Access Rules

   Fields	Description
   Access Rule Name	Enter a unique access rule name.
   Description	Enter a description for the access rule.
   Dimensions	Click the Selection icon, to select the corresponding dimension member code.

5. Select the Hierarchy Name from the drop down list.

   Note:

   The Hierarchy Names must be configured and saved through Hierarchy Management user interface. Only the saved hierarchy names will be displayed in the drop down list.
6. From the Hierarchy Browser page, select the required dimension members from the LHS and the selected dimension members list is displayed on the RHS of the page.
   By default, the List View of the dimension members is displayed.

   Search View: Enter the dimension member and search using this option.

   Sort: Sort the dimension members using this option.

   Expand: Expand the dimension members list using this option.

   Select All: Users can select all the available dimension members using this option.

   Deselect All: Users can deselect all the selected dimension members using this option.

7. Click OK to save the added dimension members to the access rule.

   Note:

   It is mandatory to select the Hierarchy member codes for all the configured dimensions displayed in the user interface while creating a data access rule.
8. Click Save to save the access rule details and a confirmation message is displayed. The newly added data access rule is displayed in the Data Access Rule Summary page.
   Users can also perform the following on the Data access rules:

   View: Click View to view an existing data access rule details.

   Edit: Click Edit to edit an existing data access rule.

   Note:

   If there is any modification in the existing rule, then the Information Access Control Data Population pipeline must be executed.

   Delete: Click Delete to delete an existing data access rule.

   Note:

   If any existing rule is deleted, the IAC user group must be unmapped from the IAM console and the IAC pipeline must be executed.