1. Analytical Application Infrastructure User Guide
  2. Object Administration
  3. Object Security Concept in OFSAAI
  4. User Group Scope

User Group Scope

This is applicable to Folder-based object types. It governs visibility of object definitions in Summary Pages and in selectable object definitions within parent objects. For Folder-based object types, user scope is controlled by segment/ folder types with which the object is associated. Folder types are Public, Shared, and Private:
  • Objects contained in a Public folder will be displayed in Summary window and in object selection lists to all users, irrespective of user group mapping. No mapping is required.
  • Objects contained in a Shared folder will be displayed in Summary window and in object selection lists, to users belonging to the user groups, which are mapped to the corresponding folder. The mapping is done from the User Group Folder Role Map window.
  • Objects contained in a Private folder will be displayed only to the associated owner (an individual user).

Consumption within Higher Objects

  • A user can consume objects associated to Public Folders in another higher object provided the Read Only role is mapped to the user group in that folder. This mapping is done through User Group Role Map window. For objects in shared folders also, the Read Only role should be mapped. This mapping is done through the User Group Folder Role Map window.

    For example, consider a Run definition in which a Classification Rule is used. Suppose the classification rule, say X is created in a Public folder called Y and the user belongs to user group UG. Then for the user to use X rule in the Run definition, the user group UG should have mapped to the “Rule Read Only” role. But if X rule is created in a Shared folder Z, the user group UG should have mapped to the folder Z and to the “Rule Read Only” role.

Folder Selector Behavior

The folders displayed in the Folder Selector window launched from the Object definition window are:
  • All Public and Shared folders which are mapped to the user group and on which the user group has Write role. Mappings should be done for Public folders through the User Group Role Map window and User Group Domain Map window. Mappings should be done for Shared folders through User Group Folder Role Map window.
  • All Private folders for which you are the owner.