<p>about your learning experience to help us improve.</p>

You've completed

cleanFiles/bookmap__SAP_Analytics_Cloud_Administration_and_Se_en-US_learning-sap-com_lsc-prod.zip (MMCP-DROPZONE) - 2025-02-17T09:43:21.000Z

Discovering Key Concepts of Content Security

<div id="content"><div class="parentsection"><div class="section"><div tabindex="0"><h3>Discovering Security in SAP Analytics Cloud</h3></div><p tabindex="0">This video covers some of the key concepts used in SAP Analytics Cloud security, such as users, teams, roles, permissions, licenses, and best practice.</p><div class="kalturaVideoLessonWrapper"><div aria-label="" class="kalturaVideoLessonContainer" data-testid="video" id="1_j6iruxfl"></div></div></div></div></div>

Security in SAP Analytics Cloud

Managing Security and Administration in SAP Analytics Cloud

Learn how to configure security settings in your SAP Analytics Cloud tenant. Set up application security, create users and teams, assign roles, specify sharing options, and secure business content data.<br><br># This description was auto-generated #

Discovering Security in SAP Analytics Cloud

Once your authentication method is set and the necessary data connections are created, you need to configure security settings in your SAP Analytics Cloud tenant. For each of your SAP Analytics Cloud tenants, you need to review and adjust security settings at three levels: the application, the business content, and the business content data. In this video, we will introduce you to the security settings that are covered in this learning journey. First, you set up application security by creating users and teams. Then, you assign existing users or teams to standard roles or new custom roles. Using teams instead of using users is recommended by SAP for roles. There are two main ways for you to create users in SAP Analytics Cloud. You can create users one by one in the system, or you can import them using a CSV file. However, there is also a third way to create users. If your tenant is connected to a custom SAML Identity Provider, you can create them dynamically by using the Dynamic User Creation feature of SAP Analytics Cloud. Once you have created users, you can group them into teams. You create teams when users require the same permissions and roles, allowing for better collaboration. Objects in the system can be shared with the entire team instead of having to assign users individually. Another application security setting allows you to specify roles and the main tasks users might perform in SAP Analytics Cloud under a specific role. For example, if you want a user to be able to open stories without being able to create or edit them, this user or their team can be assigned the Viewer role. A user or a team can be assigned to more than one role, meaning multiple users or teams might be assigned to the same role. You can also create customized roles and assign users or teams to them. For example, you can create a custom role that allows viewers to share. The next level that you need to secure in your SAP Analytics Cloud tenant is the business content. At this level, you need to specify sharing options. You can define access level to objects using roles and the Share Folder option. The access level assigned in the share Folder settings, together with the application privileges assigned through their user role, determines the actions that users can perform. For example, a user has a read access privilege assigned to an object through their role. A colleague who has Read and Edit privileges, grants them the edit privilege to the same object using the Folder Sharing settings. In this case, the user will only be able to view the object. They will not be able to edit it because the most restrictive rights apply to this object. The third security level you need to consider is the business content data. Imported data models can be secured at the dimension level and at the role level. At the dimension level, you can set access control for specific cells or values. To enable the option, you need to switch the Data Access Control on in the dimension settings or adjust the setting in the model preferences. For securing models with standard or custom roles, you can enable Model Data Privacy setting in the model preferences. When the Model Data Privacy option is off, models and imported data are public and not secured, meaning all imported data are displayed. If you switch the Model Data Privacy on, only the owner of the model and user roles with the relevant access will be able to see secured data. You can also choose to enable both Data Access Control in a dimension plus Model Data Privacy in a single imported data model. For example, restricting Entity to United States in a dimension and restricting Department ID for a specific role in the model. By applying this cumulative data security, the user will only be able to see HR, Operations, and Accounting departments for United States in their story. Once all these levels of security have been defined, your users can log in and work securely in SAP Analytics Cloud.