Security
Hi everyone,
I have been looking in the marketplace to see if there is any tutorial about 'Best practice' to set up Securities in OneStream. I couldn't find anything.
Do you have any approach to ...
Forum Discussion
Hi,
Similar to other systems the best practice is to create groups of the highest granularity to cover every use case of where the security needs to be locked down to a particular user(s). Keeping in mind to future-proof in case you think there will be further granularity required down the track. In many ways OneStream makes it easier than other platforms as I find the security more easily visible (e.g. workflow access, workflow execution access groups are visible at the top of each workflow and by scenario). Metadata access is also visible just beneath the name of the workflow in the Dimensions screen.
Nesting of groups is advised, for example if a workflow is to be accessed by Process_A_Users and Process_B_Users then you would set up a parent group e.g. Process_A_and_B_Users, assign both the other groups as children of this group, and assign the parent group to the workflow.
Cheers