Portfolio Data Center provides additional data governance workflow on field and entity level security and maintenance not previously available in prior versions of classic entity maintenance. Field level security is configured through the PDC Field Group setup menu.

Field Level Security

PDC provides field level security via business groups on the Field Group setup menu. This means that only users who belong to a given business group can override data for the fields ‘owned’ by that business group. This is based on a configuration where ‘field groups’ (meta-data component) are assigned to a specific business group.

Compound Business Group

Using Compound Business groups you can provide field editing access to users belonging to multiple business groups. A compound business group is a business group that ‘owns’ one or more regular business groups. Business groups are managed in the User Administration module.

For example assume that:

• Users 1-10 are in Business Group 1.
• User 11-20 are in Business Group 2.
• A PDC field group is currently assigned to Business Group 1. This means that although all 20 users can view entities and the field values in PDC, only users 1-10 can update or edit them.
• You want to grant field editing capabilities to all 20 users without having to pull users 11-20 out of Business Group 2.

To do this, go to the User Administration module and create a new compound business group (i.e. Compound Group ABC) and add both business groups 1 & 2.

Next, go to PDC and edit the Field Group and change its Ownership/Management assignment from Business Group 1 to Compound Group ABC. Now users from both business groups will have create and edit access to all fields in this Field Group.

Entity Level Security

PDC has a feature that allows for an entity to be granted access only to users in specific business groups. The purpose is to restrict access to an entity within other areas of the product suite.

• For example ‘Entity 1’ is assigned to regular groups 1 – 3. Users outside these groups does not have access to Entity 1, when they use the entity selector in OLAP reporting, datamart and other downstream modules.

Business group assignment of an entity is optional and you can configure it in PDC during create or edit process of entities. It is important to note that only users in the Super User group and System Admin Group can make business group assignments. Members of the super user group can alone see the Permissions tab automatically when viewing entity details. Users in other business groups does not