Data and access security is the key for Execution-MiH tools. Following are the various aspects of security framework:
Database access security:
All the data in Execution-MiH platforms is stored in a RDBMS OR multi-dimensional database. The standard data security capabilities for an evolved database platform apply on a Execution-MiH platform as well.
Single point security/user administration:
This allows a central point for user and security administration. The capabilities involve:
Role definition and user assignment to a role:
- One should be able to define the roles like Accounts super-user, distribution power-user, distribution designer, distribution user Level I, distribution level II. Etc. You define the access rights for these roles.
- To each role you should be able to assign multiple users, who will automatically inherit the access rights defined for the given role.
- Security Access Rights. The ‘read, update, add and delete’ rights for a:
- Given table, field OR a record.
- Dimension, fact OR a fact table. (Refer Dimensional Modeling for concepts)
- Report, view OR a cube.
For Example one is allowed to see only ‘product wise sales units’ view, but not the ‘product wise sales revenue’ view, though it could be coming from the same cube.
- A given attribute of a dimension.
For Example, one is allowed to see the ‘sales revenue report’ only for ‘New York’ and not for ‘California’.
- Usage window. This restricts the time window with in which a user can operate on the system. This sometimes is used to restrict the usage while cubes are getting updated.
Common security layer:
This allows platform to operate under a common security layer along with other tools with in an enterprise. This may also mean that various components within a BI platform are operating under a common security layer. This means that there is a common user ID and password. This is enabled by a centralized security services.
Secure servers and web-security:
Data retained by Business Intelligence platforms is typically the business and financial numbers, which need to be safeguarded from falling into wrong hands. Typically these platforms reside in secure servers and accesses through virtual private networks.
Data encryption
This is the next level of security, whereby data in the databases is in encrypted (coded) form, and the retrieval functions de-encrypt the data before presenting it to the user interface.
|
