Ensure secure access (perhaps more granular than it was in Discoverer)
Outcome
Security model less complex that PS, but tighter than Discoverer: UMS Finance Data Marts, with views of the data marts by campus. Finance to decide on employees' access to UMS, campus-wide, or neither
Propose two routes to Power BI:
one that is governed centrally, with centralized data marts that can either be accessed for all business units or a view on a single business unit
a non-centralized space, where individual users can import their own data sets and create their own (locally governed) workspaces. If desired, groups of users could request a centralized data source be created
Discussion items
RE Access Areas: Access (Column K) is the top level; starting point if you have access to that business unit or not. Then, 'all depts' in the dept node---does it mean all departments (it looks like it does based on these three cases). Then Program node means all programs if nothing is filled out in the Program field (and if something is there, all programs are only the programs in the program field). Same thing for projects (all projects means all unless something is filled out in the PROJECT_ID field).
First business unit, then there are additional: for Unit Access (Column K) this is for journal entries, etc. This controls what you can see on the Reports Home Page–you can still see the data in Query, but not on the Reports Home Page. What is Unit Access controlling? It does not affect GL Inquiry.
Columns L-Q: these define what, within the institution is visible. If these are blank, then the entire institution is open to the user. The amount of info in these columns limits (by departments and by projects)
RE Access Roles: What are the roles that grant access to query (R_AP_Query, R_AP_QUERY_VW, R_GL_QUERY, R_GL_QUERY_VW)? And once you get into query, do the access areas determine what you can see in your query results?
Yes, these give access to Query Manager ( )or Viewer (VW). AP and GL are the two different areas of tables within Finance module, so you need both of the manager or viewer roles in order to see both AP and GL data
How does GL Inquiry come into the mix? Is it similarly accessed?
This is a role too: R_UMS_GL_Inquiry
R_GL_Reports, SUPER REPORT, etc. other roles that have REPORTS in them: these allow people to see reports on the REPORT HOME PAGE
There are instances (Grants & Contracts, Facilities, etc.) where employees need access to specific areas, but across campuses
When Dept Node is blank, it's because the project id can only belong to one business unit anyway (first digit of project ID)
Action items
Tamara J Saarinen Query clean up (duplication on Column K)–Tamara, please hold on this. If we are going forward with the proposed route above, this query needn't be cleaned up. I wanted to note the duplication here, but I am not sure if it needs to be remedied or not.
Tamara J Saarinen How many people had access to Discoverer vs. PS Query? Can we analyze the areas data by campus to give an indication?
Rachel C Groenhout Thursday CBO meeting: propose above outcome. What do the CBOs want in terms of folks on their campus having access to the whole campus? Who would decide on who has access to the centralized PBI space? Other concerns?