Managing cube access permissions

You can manage cube access permissions within a model on the TABACC cube's Properties and Permissions tabs. On the Properties tab, you manage the settings of the cube access control. On the Permissions tab, you manage cube access permissions per data role.

TABACC Properties tab

On the Properties tab of the TABACC cube, you can perform these actions:

  • Enable or disable the Enable Cube Access Control option.
  • Select an existing data table or create a new data table to manage permission values.

When the Enable Cube Access Control option is enabled, the DEPM_MOD_TABACCTABLE table is updated with the current model and selected data table.

If you disable the Enable Cube Access Control option, the record is removed from the DEPM_MOD_TABACCTABLE table.

If the selected data table is invalid or missing, the table is displayed with an Error icon and appropriately labeled tooltip.

If the table creation fails, you are notified. Ensure that all required columns have a correct value.

These columns of a data table are required:

  • CubeName
  • RoleName
  • Value

TABACC Permissions tab

Before you set up access permissions per data role, you must ensure that on the TABACC Properties tab, the Enable Cube Access Control option is enabled and a valid data table is linked from the DEPM_MOD_TABACCTABLE table. Otherwise, a No data available message is displayed on the Permissions tab.

By default, all data roles are assigned the Default access permission to cubes. You can assign these permissions to data roles on the Permissions pane:

  • No access
  • Read access
  • Write access

On the Permissions pane, you can also perform these actions:

  • Search for required roles in the Search field.
  • Sort roles by permission or role name.
  • Click the Filter option to filter roles by permission.
  • Click Add to add new data roles.
  • Click the three-dot icon in the Actions column for a specific role to select an option to edit or delete that role.

Permissions are stored in and retrieved from a table that is linked from the DEPM_MOD_TABACCTABLE table. Permission updates are published to the TABACC cube of the specific model.