A Department Manager requires access to all accounts in their own department, but only a certain account in all other departments. With the usual metadata security, the Manager would have access to all accounts across all departments.

Cell-level security is the appropriate feature for this requirement. It allows administrators to define access rights to specific cells, or intersections of data, based on a conditional expression. In this scenario, a rule can be created to grant the manager write access to all accounts for their specific department, while a second rule can restrict their access to only a single specific account for all other departments. This provides the necessary granular control that standard member-level security cannot.

A. Member security applies access rights to an entire dimension member (e.g., an entire department or account), which is not granular enough for this specific scenario.
B. Artifact security controls access to objects like forms, dashboards, and business rules, not the underlying data cells within the cube.
D. Access control is a general term. Cell-level security is the specific Oracle EPM Cloud feature that implements this type of granular access control.

- Oracle® Cloud Enterprise Performance Management Cloud

Administering Planning

F54470-03

Chapter 12

"Administering Application and System Security

" Section "About Cell-Level Security

" p. 261.

- Oracle® Cloud Enterprise Performance Management Cloud

Administering Planning

F54470-03

Chapter 12

"Administering Application and System Security

" Section "Designing Cell-Level Security

" p. 262.