Overview

This template provides the functionality to define Segment Value Security (SVS) for Value Sets.
SVS provides the capability to allow custom roles to access only specific values of a value set.
In the following sheet you create Policies which will govern the access to segment values. Policy creation is the process
Thus a user having a certain segment value security role will have access to only those values that the Conditions speci
will lose access (both read and write) to all segment values once SVS is enabled for the value sets.

Custom Role Creation

1. Create segment value secuirty roles in Security Console by simply creating a role and giving it a suitable name.
2. Assign these roles a Role Category of Default.
Example: Create a role with a name of ACCOUNTING_COST_CENTER_SVS_ROLE. Use an underscore between each wor
suffix, such as SVS_ROLE.
Best practice:
Create segment value security roles for the purpose of grouping segment value security rules to be assigned to one or m
you need to represent unique segment value security profiles for your users. Create these roles ahead of defining the s
spreadsheet. Associate these roles with the conditions to create a complete data security policy. Assign these roles to u

Template Explained
Worksheet Status
Changed
Status
Role*
Value Set*
Tree Code
Values*
* Mandatory fields
Note:
1. This template can only be used to create NEW segment value security rules. To update existing rules access the Manage Segme
2. You may insert additional rows in the table if necessary.

3. You need to deploy the flex if you enabling the security for the Value Set after creating the security rules. If already enabled you
4. Values are not validated until those are submitted.

Steps to complete and submit the template:

1. Select the segment value security role which should have access to the values in the Roles column.
2. Select the value set for which you want to define security policies in the Value Set column.
3. Select the Tree Code for the parent value entered in the Values column.
4. Specify the values to which you want to provide access in Values column. You may use the following ways of enterin
a. Enter 'ALL' to provide access to all values of the segment.
b. Enter child values seperated by commas (,) to provide access to only these values. Example: 1110,1120
c. Enter child values separated by a hyphen (-) to provide access to all values in that range. Multiple ranges may be en
d. Enter a parent value to provide access to all descendants of this parent. Multiple parent values may be entered sep
e. You may provide all the above value types in the same cell. Example: 1110,1120,220-2500,3100-3400,4000,5000

5. Once you have reviewed the data entered, click the Submit button to publish the SVS policies to the database.
 Rapid Implementation: Segment Value Security

vides the functionality to define Segment Value Security (SVS) for Value Sets.
capability to allow custom roles to access only specific values of a value set.
heet you create Policies which will govern the access to segment values. Policy creation is the process of associating Conditions (which
g a certain segment value security role will have access to only those values that the Conditions specify. Please note that roles that are
oth read and write) to all segment values once SVS is enabled for the value sets.

eation
value secuirty roles in Security Console by simply creating a role and giving it a suitable name.
es a Role Category of Default.
role with a name of ACCOUNTING_COST_CENTER_SVS_ROLE. Use an underscore between each word in the name and for easy identi
_ROLE.

alue security roles for the purpose of grouping segment value security rules to be assigned to one or more users. Plan for the number
sent unique segment value security profiles for your users. Create these roles ahead of defining the segment value security rules so th
ciate these roles with the conditions to create a complete data security policy. Assign these roles to users based on their security profi
 Shows the upload results for the worksheet.
Indicates that the row has been updated.
Shows the upload results for the row.
The role which gets access to the values specified in the previous column.
The value set which you wish to define security policies for.
The tree code you want to select for the parent value you specified. Three code is mandatory if parent value is specified.
The values to which you want to provide access.

n only be used to create NEW segment value security rules. To update existing rules access the Manage Segment Value Security Rules page from
dditional rows in the table if necessary.

oy the flex if you enabling the security for the Value Set after creating the security rules. If already enabled you do not need to deploy the flex.
lidated until those are submitted.

te and submit the template:

ent value security role which should have access to the values in the Roles column.
set for which you want to define security policies in the Value Set column.
Code for the parent value entered in the Values column.
es to which you want to provide access in Values column. You may use the following ways of entering the values:
provide access to all values of the segment.
ues seperated by commas (,) to provide access to only these values. Example: 1110,1120
ues separated by a hyphen (-) to provide access to all values in that range. Multiple ranges may be entered separated by commas (,). E
value to provide access to all descendants of this parent. Multiple parent values may be entered separated by commas (,). Example: 4
de all the above value types in the same cell. Example: 1110,1120,220-2500,3100-3400,4000,5000

reviewed the data entered, click the Submit button to publish the SVS policies to the database.
ork area.
Create Segment Value Security Rules

Worksheet Status
* Required
Changed Status *Role Name
Row inserted
successfully TRANSPORTATION_SBU_SVS_ROLE
Row inserted
successfully TELECOMS_SBU_SVS_ROLE
Row inserted
successfully PLANT_SBU_SVS_ROLE
UTILITIES_DATA_SBU_SVS_ROLE
ALL_SBU_SVS_ROLE
*Value Set Tree Code *Values

MGROUP_FIN_SBU_VS MGROUP_FIN_SBU_TREE 3100

MGROUP_FIN_SBU_VS MGROUP_FIN_SBU_TREE 4100

MGROUP_FIN_SBU_VS MGROUP_FIN_SBU_TREE 8100

MGROUP_FIN_SBU_VS MGROUP_FIN_SBU_TREE 1100
MGROUP_FIN_SBU_VS B2177581W88)EU.0
B2177581W88)EU.0
B2177581W88)EU.0
B2177581W88)EU.0
B2177581W88)EU.0
B2177581W88)EU.0