Example 3: OLAP permissions in data roles

Data roles are used to manage element and cell permissions.

In this example, you have OLAP Permission Management roles for each product element in Infor BI 11.0. In the access cube for the Product dimension, each role provides view permission to the corresponding product element.

To migrate existing OLAP permissions for data roles:

1. In the target application, create new data roles for all products. Typically, you do not need to give data roles global permissions, as users will always also have application roles, which provide the correct global permissions.
2. Migrate the OLAP database to the application.

When the OLAP database starts, it updates the GRP dimension with both the application and data roles of the application. If roles are missing, elements are removed from access cubes and therefore, permissions are lost. If roles with the right names exist when starting the database, the role elements and permissions are kept.