Portfolio Data Center provides additional data governance workflow on field and entity level security and maintenance not previously available in prior versions of classic entity maintenance. Field level security is configured through the PDC Field Group setup menu.
Field Level Security
PDC provides field level security via business groups on the Field Group setup menu. This means that only users who belong to a given business group can override data for the fields ‘owned’ by that business group. This is based on a configuration where ‘field groups’ (meta-data component) are assigned to a specific business group.
Compound Business Group
Using Compound Business groups you can provide field editing access to users belonging to multiple business groups. A compound business group is a business group that ‘owns’ one or more regular business groups. Business groups are managed in the User Administration module.
...
Info |
---|
For more information about Compound groups, see User Administration |
Best Practices
The manner by which business groups come into play depends on your workflow requirements and policies. The following variations are suggestions for illustrative purposes:
- Scenario 1: There is one group responsible for entity maintenance and they should have access to all fields.
- Make sure all users are in the same business group and make sure all Field Groups are assigned to that group.
- If these users are already spread across multiple business groups, create a compound group that includes the full spectrum of business groups, then reset all the Field Groups to be assigned to the new compound group. - Scenario 2: Create several distinct groups and each are responsible for specific field groups. For example legal type fields are maintained by the legal department, performance fields by the performance department, etc.
- First determine how many distinct groups are there
- Create a business group for each area and assign users
- Create field groups that contain the fields that each area is responsible for
- Ensure each field group is assigned to the associated business group
Entity Level Security
PDC has a feature that allows for an entity to be granted access only to users in specific business groups. The purpose is to restrict access to an entity within other areas of the product suite.
...