Business Intelligence data can be granted or restricted to users depending on the:
• subject areas (e.g. sales or financials);
• specific dashboards/reports within subject areas;
• specific members of dimensions (e.g. only access to Company with key 01)
Access could also be restriced to certain cubes in a subject area but we will ignore this for now as many dashboards use multiple cubes.
Access can be defined using BI Server user roles. The adminstration console can be used to define the roles and users. The roles could be defined as follows:
erpbi.subject.subjectname - Must be defined in order to access data in a subject area. Access to all cubes, dashboards and reports in the subject area is assumed unless overridden by other roles.
erpbi.report.subjectname.reportname - If a specific report is named in a subject area, then the user only has access to this report. The reportname is the the xcdf file name.
erpbi.dimension.dimensionname.membername - If a specific dimension membername is given then data will be restricted to only that member (from the "code" hierarchy)
