I have 2 companies (01,02)
I have 2 deptno (10,20)
I would like to create 2 Data Access Sets so that
DAS#1 has access to Company 01 and Deptno 10 only !
DAS#2 has access to Company 02 and Deptno 20 only !
.
Deptno is defined as a Management Segment.
.


I don't think this is possible using ONLY data access sets. I believe I need to also use Security Rules.

Is this correct ?

Thanks

Hi Charlie,


Data Access Set security can only be implemented on two COA segment types: Balancing segment and a segment declared as a Management Segment. You can declare any segment of a COA as Management Segment except Company segment, Natural Account segment, and Intercompany segment.

You your scenario, you will have to declare the Department segment as a Management segment.
Remember, Data Access Set restricted security is more powerful that Security Rules security.

1.a) Define restricted Data Access (DAS#1)on Balancing Segment value 01 and Department segment value 10 so that users assigned (DAS#1) will only have access to company 01 and department 10 values only.

1.b) Define restricted Data Access (DAS#2)on Balancing Segment value 02 and Department segment value 20 so that users assigned (DAS#2) will only have access to company 02 and department 20 values only.

2) You can also define Security Rules security for the above scenario, but this is not cost effective thing to do in this case.

3) In the above situation, whether you adopt 1) or 2) there is no any reason to mix the tow options.

I hope I have answered your question

Hi Gavrobere,

Assumption : Department segment is defined as the Management Segment.
.
You define a Data Access Set to work with Balancing Segments or with Managment segments.. but NOT BOTH at the same time...
.
I don't think you can create a DAS#1 that is restricted to the Balanacing Segment 01 and Dept 10
.
Have you tried to create a DAS that takes into account 2 unique segments (Balancing segment and Management segment) ?
I don't think it can be done. Please correct me if I am wrong.
I tried and I could not do it.
.
Hasan, can you help out please..
Thanks

Data Access Set restricted security is normally implemented on company segment values. But, if there is need to restrict access on another segment, then you can create Data Access Set on both company segment and that other segment.
First of all, you should have declare the other segment as a Management Segment.
NB. You cannot declare the following as a Management Segment: Company segment, Natural Account, Intercompany.

Important point to note: If you have defined your Chart of Account, attached it to your ledger and then started using this ledger, then you can no longer declare Department segment as a Management Segment in the usual way.
This could perhaps be your case if you are not being able to implement Data Access Set at the same time on both company segment and Department segment.
If you are already using your ledger, then you will need to run a two programs in a systematic order in order to declare Department segment as a Management Segment.
Hasan will confirm this, I bet!
Cheers
Gavrobere

Thanks,
You mentioned "you will need to run a two programs in a systematic order"...
Do you know the names of these 2 programs. I can't find the names in the video.
Much appreciated.

I'll try creating a NEW COA and assign it to a NEW LEDGER.
I'm curious HOW to define a Data Access Set that takes into account BOTH balancing segment and management segment in 1 Data Access Set.

Thanks

Gavro,

You've said that in 1 Restricted Data Access Set you can define both a Balancing Segment value and a Management Segment Value
(ie.. Company 01 and Deptno 10 )

I've tried a number of things, and I DON'T think it's possible.

Can you create 1 Restricted Data Access set for this example and POST the screen shot here ?


Thanks
Charlie

I'd really like to see it, as I can not create such.

Thanks
You don't need to do anyting BUT create a DAS.
I'd like to see the entry in the screen.

Charlie,

I am sorry, I was wrong in my previous post.

You cannot implement, at the same time, both Balancing Segment Value and Management Segment Value on the same Data Access Set.

On Data Access Set screen, no matter the number of ledgers you attach to your Data Access Set, the “Access Set Type” can only be is either:
a) Full Ledger;
b) Balancing Segment Value
c) Management Segment Value

You can define a Data Access Set on either BSV or MSV, but not on both BSV and MSV at the same.

One Data Access Set may be based on BSV, and another based on MSV depending on the need.

Sorry for the confusion!

To meet the business requirements set above using Data Access Set, this is the cost effective way (in terms of security access management) to implement it:

Define Data Access Set1 (DAS#1) based on access set type as Balancing Segment Value (BSV) and re-enforce this with a Security Rule security.

Define Data Access Set2 (DAS#2) based on access set type as Balancing Segment Value (BSV) and re-enforce this with a Security Rule security.

Thanks for the clarification.
I was getting REALLY confused.
That's exactly what I thought, you can use either BSV's or MSV's... but not BOTH in 1 Data Access Set.

You had me going for a while. :)

Thanks again for clearing it up !

In R12 you can use both Data Access Set and Security Rules.
If the department segment is your management segment as well, then you can use
Data Access Set. That would do the job.
The problem: You will need to create one additional responsibility that will have access to all depts.
Why? So that you could open periods.
If you are using Data Access Set security then you need full ledger access to run programs like open period and few others. I have explained this in detail in my videos. Security Rule does not pose this problem however it is a weaker security in comparison to Data Access Set. Not all screens and reports implements security rules.

Yes you are right. DAS would either restrict you on specific BSVs or specific MSVS, but not on both.

DAS1 = Full access on Ledger1
DAS2 = Access on BSVs 01,02,03 of Ledger1
DAS3 = Access on MSVs 01,02,03 of Ledger1

IF you are adding MS segment then you need to run:
1) Prepare MS upgrade and
2) Complete MS
These programs should not be run when journals are being generated, entered, imported and posted, archived, or purged.

"I'm curious HOW to define a Data Access Set that takes into account BOTH balancing segment and management segment in 1 Data Access Set."

Options:
1) Use Security rules on both segments
2) Or use DAS on balancing segment and Security Rules on the other.

See video for cost/benefit of security rules vs data access set.

Hasan, thank you very much for letting us know the names of the two programs to run to declare a Management Segment later on, and the conditions to meet before running them.

Charlie, thank you also for engineering the scenario!