The first step in applying access rules is selecting\/adding the dimensions you want to secure. \u00a0This can include Levels, Accounts and custom Dimensions, with a few exceptions<\/em><\/strong>.<\/p>\n \u00a0<\/em><\/strong>Exceptions include:<\/em><\/strong><\/p>\n The next step is to export the existing access rules or template (can be found by clicking Import), and add\/update rows (access rules) as needed with the appropriate columns filled in.<\/p>\n Access Type \u2013<\/strong> determines how data can be accessed and provides three options:\u00a0 Limited View, Full View, and Edit.\u00a0 Limited View prevents you from seeing supporting details such as splits, modeled sheet rows, and transactions.\u00a0 Full View allows you to see all data details and Edit allows you to view all data and make changes.<\/p>\n Username <\/strong>or Group Name \u2013 <\/strong>will be the user ID or group name.\u00a0 If multiple users have the same access, add them to a single group and write one access rule.<\/p>\n Level<\/strong> \u2013 is critical for users to access data and can include a mix of parents and children; including a parent level will assume access to all it\u2019s descendants.\u00a0 Can grant or exclude access.<\/p>\n Account <\/strong>or Custom Dimension <\/strong>columns \u2013 can be left blank (which assumes full access) or can grant or exclude access.<\/p>\n The final step is importing your access rules.\u00a0 You can choose from the options:\u00a0 \u201cUpdate and Append\u201d or \u201cReplace All\u201d.<\/p>\n \u00a0<\/strong><\/p>\n Navigating the Access Rules Table<\/strong><\/span><\/p>\n Type \u2013 <\/strong>refers to either User or Group and will autogenerate.\u00a0 By clicking on \u201cUser\u201d or \u201cGroup\u201d in the Type column you can view the specific rule details.<\/p>\n More Options \u2013 <\/strong>all column headers except Level gives you additional options by hovering over them.\u00a0 Type, Name, and Access provide sorting capabilities and Account and custom dimensions have a Remove option.<\/p>\n Search \u2013 <\/strong>quickly search for keywords to find specific rules<\/p>\n <\/p>\n Rule Precedence<\/strong><\/span><\/p>\n Many times, a user will have multiple access rules.\u00a0 Be aware that access follows the most permissive rule.\u00a0 For example, assume a scenario where a user is part of a group rule that has top level access and that user has an individual rule that limits access to only a couple child Levels.\u00a0 That user will be able to access data at all levels because the group they are part of has top level access.<\/p>\n Example<\/strong><\/span><\/p>\n In the Example above:\u00a0 <\/em><\/p>\n Prior to the 2019.3 release, security was restricted to level access control in conjuncture with account, version, and sheet settings .\u00a0 Limited no longer!\u00a0 Security is more robust and now includes access rules on accounts and custom dimensions in order to limit specific intersections of data that users and groups can view or edit.\u00a0 Levels,…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[35,69,54],"class_list":["post-3518","post","type-post","status-publish","format-standard","hentry","category-workday-adaptive-planning","tag-development","tag-workday-adaptive-planning","tag-workday-adaptive-planning-development"],"acf":[],"yoast_head":"\n\n
![\"\"](\"https:\/\/quebit.com\/askquebit\/wp-content\/uploads\/2020\/07\/Securing-Rules.png\")
<\/p>\n![\"\"](\"https:\/\/quebit.com\/askquebit\/wp-content\/uploads\/2020\/07\/Securing-Rules2.png\")
<\/p>\n![\"\"](\"https:\/\/quebit.com\/askquebit\/wp-content\/uploads\/2020\/07\/Securing-Rules3.png\")
<\/strong><\/p>\n\n