SAP Knowledge Base Article - Public

2841717 - Data Access Control (DAC) is only applied to the default hierarchy in SAP Analytics Cloud (SAC)


If data access control (DAC) is set up on a dimension with more than 1 hierarchy the DAC only takes the first hierarchy into consideration.


  • SAP Analytics Cloud

Reproducing the Issue

  1. Create a Dimension with at least 2 hierarchies
  2. Create a parent member "ParentA"
  3. Create 4 child members "ChildA", "ChildB", ChildC" and "ChildD"
  4. In the first hierarchy assign "ParentA" as the parent for "ChildA" and "ChildB"
  5. In the second hierarchy assign "ParentA" as the parent for "ChildC" and "ChildD"
  6. Grant Read only rights to members "ParentA", "ChildC", and "ChildD" to a Planning reporter user (non Admin)
  7. Based on the read rights granted above customer is expecting that these four child members will be visible for the Planning Reporter user
  8. Create a story and create a page filter for the dimension above
  9. On the "Edit filter" page change "Show Hierarchy" to "Flat presentation". You will only see members "ChildA" and "ChildB"


  • This is a known limitation of the product
  • The data access control can only be applied to the default hierarchy of a dimension which is typically the first hierarchy defined on the dimension.
  • Any further hierarchies will not be taken into account for DAC.


This improvement request to select the default hierarchy is delivered in Q1/2022.

Now, you have the option to select a specific hierarchy as the default hierarchy.

See Also

Your feedback is important to help us improve our knowledge base.


SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sac dac acces kba, Publishing data does not work for non-Admin roles , KBA , publishing data does not work for non-ad , does not work for non-admin roles , hide parents dac sac kba , for end user with security restriction a , top level hierachy is displayed for end , the dac for 2nd hierarchy member , multiple dimensions not propogating the , propagating the , security restriction at leaf level node , LOD-ANA-ADM , SAC Administration , LOD-ANA-PL , Planning , Problem


SAP Analytics Cloud 1.0