Skip to content

Analysis Models - Setup

This page provides information specific to the setup of the Analysis Models.

Environment Parameters

Defining the environment parameters correctly is essential to be able to use the tabular framework.

For more detailed information about the Environment Parameters page and the Setup Environment Assistant, please refer to IFS Analysis Models - Installation.

AD User Mappings

Tabular models that support built-in RLS (Row Level Security) require some user setup to be made.

RLS in a tabular model is based in Role definitions. Each role has a unique name and the role typically defines:

  1. Permissions
  2. Included members
  3. RLS filter expressions

The RLS filter is a DAX expression that will basically compare the current user with a table of users that contains info about permissions for each user.

The user->permission handling is built into the models. The information is retrieved from IFS Cloud.

Even if users are defined in IFS Cloud to be part of a company, defined as GL users, project members, site members etc., these users will not by default get access. Only users that are defined on the AD User Mappings will be considered by the different RLS implementations.

The reason is to make sure that the IFS user identity, also called Fnd User, is correctly mapped to an AD user that a tabular model can retrieve via DAX functions as USERNAME() and USERPRINCIPLENAME().

For many installations, the AD User Identity will be represented by the UPN, i.e. the User Principle Name. The UPN for the user then needs to be mapped to the Fnd User identity. If the principle name is used, then the DAX filter must use the function USERPRINCIPLENAME().

For same installations it will be possible to also use a domain name as e.g. <domain>\<userid> as the AD User Identity. If the domain user name is used, then the DAX filter must use the function USERNAME().

From 23R1 onwards following models have inbuilt RLS.

  • General Ledger
  • Employee Analysis
  • Cash Planning
  • Salary Review Analysis

AD User Mappings are grouped into 3 sections based on the functional areas of the Tabular models.

  • Finance - User mappings related to the 'Base' roles delivered by IFS for General Ledger and Cash Planning models.
  • HCM - User mappings related to the 'Base' roles delivered by IFS for Employee Analysis and Salary Review Analysis models.
  • Custom - User mappings related to any custom roles created.

AdUserMapping

For the above mentioned 4 models, the necessary access related information should be generated and stored in respective tables. This approach was taken to minimize the time taken for the access detail data load. Background jobs should be created to accomplish this and for more information please refer to Refresh and Re Generate AD User Access. When creating schedules of these background jobs make sure to schedule them before the ETL(load to SQL server) related schedules.

To generate access for a selected set of users at any time use the following commands by selecting each user.

  • Generate Access for General Ledger Code Combinations
  • Generate Access for Employee Analysis
  • Generate Access for Cash Planning
  • Generate Access for Salary Review Analysis