3254803 - Delete facts option in a model not respecting data access control delete column setting in SAP Analytics Cloud (SAC)

The delete facts option in a model does not respect the data access control (DAC) delete column setting in SAP Analytics Cloud (SAC).

• The delete permission for a member of the Version dimension refers to the deletion of the dimension member itself and not to the underlying fact data.
• Fact data deletion is controlled by the "maintain" privilege which covers data changes and there is no differentiation between setting a value to zero or deleting it.
• If a user has write access to a dimension member via DAC, then that user will be able to update the fact data for that dimension by entering a zero (0), clearing the data in the table and publishing it, or going into the model and selecting the delete facts option.

Working as designed.

See the following help pages and knowledge base articles for further information:

• Learn About Data Security in Your Model
• Set Up Data Access Control
• 2815108 - SAP Analytics Cloud Best Practice - Where can I find resources and best practices for security?

• 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
• Have a question? Ask it here and let our amazing SAP community help! Or reply and share your knowledge!
• 2487011 - What information do I need to provide when opening a case for SAP Analytics Cloud?
• 2511489 - Troubleshooting performance issues in SAP Analytics Cloud
• Search for SAP Analytics Cloud content using Google or Bing:
  
  • https://www.google.com/search?q=site%3Ahttps%3A%2F%2Fuserapps.support.sap.com+SAP+Analytics+Cloud
  • https://www.bing.com/search?q=site%3Ahttps%3A%2F%2Fuserapps.support.sap.com+SAP+Analytics+Cloud
  • Note: Add relevant text or warning/error messages to the text search field to filter results.
• SAP Analytics Cloud Connection Guide
• Getting Started with SAP Analytics Cloud Expert Community page
• SAP Analytics Cloud Get More Help and SAP Support
• Need More Help? Contact Support or visit the solution finder today!

Your feedback is important to help us improve our knowledge base.

SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC, sap analyst cloud, connected, failure, stopped, sap analyst cloud, https://hcs.cloud.sap, https://hanacloudservices.cloud.sap, https://cloudanalytics.accounts.ondemand.com, https://hanacloudservices-us.accounts.ondemand.com, https://www.sap.com, https://help.sap.com, predictive analytics (analysis), data analysis (analytics) tools, analytics tools, sap analytics cloud, data literacy, advanced analytics, data democratization, analytics software, real time analytics, self service analytics, advanced data analytics, analytics as a service, analytics cloud / cloud analytics, saas analytics, cloud bi, enterprise planning, cloud data analytics, cloud based analytics, analytics cloud platform, modern analytics, real time analysis, cloud analytics solution(s), what is sap analytics cloud, cloud analytics tools, analytics in the cloud, cloud analytics software, sac hot news sac kba sap analyst cloud, Planning user with Planning reporter role is able to delete facts in the model directly for all companies or versions access to write enabled  , KBA , LOD-ANA-ML , SAC Modelling , LOD-ANA-ADM , SAC Administration , LOD-ANA-PL-VER , Version Management , Problem