To override the default data security for specific users, what steps are required?

To override the default data security for specific users, what steps are required?

• A. Create a custom data role and set up data filters that specify the values for specific dimensions.
• B. Modify the global security policy.
• C. Change the user’s role in Fusion.
• D. Enable a separate FDI tenant.

Answer: (A)

The main idea is to use data roles with data filters to tailor access for individual users. In Fusion, data access is controlled through security policies and data roles, and you can specifically override the default access by creating a custom data role that includes data filters. These filters specify which values of certain dimensions (like operating unit, department, or project) a user may see. By defining a custom data role and attaching the appropriate filters, you constrain the user’s view to only those data values, effectively overriding the broader default security for that user. Once the role is defined, you assign it to the user. Other options are less precise for this purpose: changing the global security policy would change access for everyone, altering the user’s role without granular filters may not enforce the needed restrictions, and enabling a separate FDI tenant is not about per-user data visibility within the same environment.

The main idea is to use data roles with data filters to tailor access for individual users. In Fusion, data access is controlled through security policies and data roles, and you can specifically override the default access by creating a custom data role that includes data filters. These filters specify which values of certain dimensions (like operating unit, department, or project) a user may see. By defining a custom data role and attaching the appropriate filters, you constrain the user’s view to only those data values, effectively overriding the broader default security for that user. Once the role is defined, you assign it to the user. Other options are less precise for this purpose: changing the global security policy would change access for everyone, altering the user’s role without granular filters may not enforce the needed restrictions, and enabling a separate FDI tenant is not about per-user data visibility within the same environment.