[User Access] Grant (View / Edit) Access to a Dimension
Dimensions and their Dimension Values are an integral part of the Security Model. For dimensioned elements, the User must have access to BOTH the Element and at least one Dimension Value. Regular and Power Users ONLY see the element's tile(s) or Chart(s) for those specific Dimension Value(s) to which they have been granted access and then only if data has been collected for a Dimension Value.
An Administrator can view and edit any Dimension. Regular and Power Users may be granted access to Dimensions directly or inherit from a Group to which they belong.
Note that while it is possible to grant Dimension and Dimension Value access directly to a specific user, assigning permissions through a Group typically provides a more manageable framework for security administration. Users who are members of multiple groups receive the aggregate permission set from all of the assigned groups. For more details refer to: [Group Access] Grant (View / Edit) Access to a Dimension
You can grant a User direct view or edit access to a Dimension from 2 places in the system:
- Dimension Editor
- User Editor
NOTE: Both options are described in this article.
Tips for creating Dimensions:
1. Access User OR Dimension Editor
- Access Admin > Dimension > choose Dimension from the list > open Dimension Editor > Advanced tab
- Click Permissions. The pop-up opens.
- In the Grooup Access section click [+ New User access to Dimension]. The pop-up opens.
- User: From the drop-down list choose a User who should be given access the the Dimension.
2. View OR Edit Access to the Dimension
Regardless of the Editor you started with, the logic of the following actions is going to be identical.
- Can edit: by setting this field to 'no', you give User View Access only.
- If only View access is given, a Scope of access can be limited and a Users can have access to either:
- 'All Dimension Values': to grant the User access to any/all Dimension Values
- or 'Specific Dimension Values': to select only those which the User 'needs to know'
Both options are descibed below.
- Notice that the Dimension appears in the table, highlighted in yellow, since 'Specific Dimension Values' is its scope of access and those Dimension Values have not been specified yet.
- Click [+ Dimension Values access to User]. The Add Dimension Value Access to User pop-up opens.
- Check the Dimension Value to which access should be given.
- Save your selection.
Repeat the procedure to add more Dimension Values.
Power User is automatically given element-only access to all Dimension Values when:
- Granted explicit Edit Access to an Element or Category
- Designated as element's Technical Owner AND, for version 4.2 and above:
- Power User inherits or is directly granted Dimension access as well as at least one Dimension Value permission AND
- Power User has been granted the associated Create Content Privilege or the Permission to the use element's Data Source
- Creates a new Dimensioned element
- Inherits Edit Access to an Element or Category from his/her Group
NOTE: If edit acces is given to a Dimension, it is given to all Dimension Values by default.
Can edit: If you set this field to 'yes', here are th things to consider:
- Power User will be able to edit this Dimension and all its Values.
- Power User will only be able to grant access to this Dimension to Group(s) of which he/she is a member or to other Power/Regular Users who belong to the same Group(s) as this Power User UNLESS he has been given the Privilege to grant Dimension access to any Group or Regular/Power User. To grant this Privilege, go to Power User Editor > Privileges section > [+Privilege to User]. See the picture below.
Next: To allow Power Users edit Dimension Properties, make sure they have respective Permissions and Privileges. The necesseity to add certain Permissions and Privileges depends on Dimension's Value Source.
- Access Dimension Editor > Info tab
- In the Value Source field click the Gear icon. You are going to be redirected to the Data Source Editor
- At the upper right corner of the Data Source Editor click Permissions. The pop-up opens.
- Click [+New Power User to Data Source]. In the opened pop-up choose a User from the drop-down list.
If the Value Source is CSV file, you should add a Privilage to use this kind of Data Source to a Group.
- Access a User Editor: Admin > Users > choose a required Users from the list > open a User Editor > Info tab
- In the Privileges section click [+Privilege to a User]. The pop-up opens.
- Choose Create content using CSV Files Privilege
Save your selection.