Symptom
When one permission group has multiple permission roles with WFA tree security configured, how do they interact?
Environment
SuccessFactors Workforce Analytics with RBP integration activated in BizX
Resolution
Tree security from multiple roles amounts to cumulative permission. If WFA data is unrestricted by at least one role, users in the group will be able to access it. This applies to Tree Security as well as measures and dimensions, and it applies to roles with no tree security configured.
To be sure that a given branch of a structural dimension (e.g. Org Unit) is restricted from a group, it must be restricted in every role that applies.
Keywords
KBA , LOD-SF-WFA , Workforce Analytics & Planning , How To