sap dac
SAP Data Access Control
(DAC) – A Student Guide
In the world of data, not everyone should have
access to everything. Companies need to control who can see or change specific
parts of their data. This is where SAP Data Access Control (DAC) comes in. DAC
is a feature in SAP Analytics Cloud (SAC) that helps administrators decide
which users can access which parts of the data model. Instead of showing all
the data to everyone, DAC ensures that users only see the data relevant to
them.
Why is DAC Important?
- Privacy & Security: Sensitive data must
stay safe. DAC ensures only authorized users can see it.
- Clarity & Relevance: Users see only what matters to them, making
dashboards simple and useful.
- Compliance: Many industries must follow strict data rules. DAC helps
companies meet these legal requirements.
How Does DAC Work?
DAC uses a permissions entity, such as tables
or views, that map SAP Datasphere user IDs to specific filter criteria, like
regions, sales organizations, or departments. When a DAC is applied to a data
object (e.g., views or models), any query or report referencing that object
will automatically filter data based on the user’s permissions. If no entry
exists for a user, they will not see any data in that object.
Examples to Understand
Basic
Example: Imagine a dimension called Employee. If you want John to see only his
own data, you can give him read rights only for the 'John' member. This way, no
one else can see John’s data.
Hierarchy Example: Consider a Location
dimension with a hierarchy: Continent → Country → City. If John has access only
to 'India', then:
- He may still see totals for Asia if the parent is visible.
- If the 'Hide Parent' option is enabled, John will only see India, without the
Asia total.
Limitations to Keep in
Mind
Roles with Full Data Access (like admins) may
bypass DAC rules and see everything.
Users may still view master data (like dimension names) even without write
rights, but they cannot edit it.
If a dimension has multiple hierarchies, DAC usually applies only to the
default hierarchy.
When models are moved between systems (like development to production), DAC
settings may not always transfer correctly. Always double-check after
transport.
How to Set Up DAC (Basic
Steps)
. Open the model in SAP Analytics Cloud.
. Go to the dimension where restrictions are needed and enable Data Access
Control.
. Assign Read, Write, or Delete rights to users or teams for each member.
. (Optional) Enable Hide Parent if you don’t want parent values in a hierarchy
to show.
When it comes to SAP DAC Corporate Training, we
can say proudly that we have received excellent feedback and appreciation from
our corporate clients across the globe. You can reach us for SAP DAC corporate
training and we can even customize the training content as per your
requirement.
Conclusion
SAP Data Access Control (DAC) acts like a
gatekeeper in SAP Analytics Cloud. It ensures users only see the data they are
allowed to, based on dimensions, permissions, roles, and hierarchies. For
students, the key points to remember are:
A dimension is a category, and members are its items.
Permissions (read, write, delete) define what a user can do.
Roles and hierarchies affect visibility.
Admin roles may override DAC restrictions.
Always test DAC settings with restricted users to ensure reports look correct.
For more info:
Mobile/WhatsApp number- INDIA+919036511943 USA +19179939711
Email id- contact@techmunus.com
Website url- https://www.techmunus.com/page/sap-dac-training
Comments
Post a Comment