EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  3. Topics

KB4409: The Object Access Control List in MicroStrategy

Stefan Zepeda

Salesforce Solutions Architect • Strategy

The Access Control List objects is a list of users and groups and the permissions of each for the particular object.

The Access Control List objects is a list of users and groups and the permissions of each for the particular object. Access Control lists include the following information:

  • User: The name of the user or group granted or denied access to the object.
  • Permissions: The degree to which the user or group is granted or denied access to the object. The available permissions are:


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


    HierarchyAttributeLevel in HierarchyWeight1A11/3 * 10 = 3.33B22/3 * 10 = 6.66C11/3 * 10 = 3.33D33/3 * 10 = 102E11/4 * 10 = 2.5F22/4 * 10 = 5G33/4 * 10 = 7.5H44/4 * 10 = 10TableAttribute IDsLogical Table SizeLU_AAROUND(3.33) = 3LU_BA, BROUND(3.33 + 6.66) = 10LU_CCROUND(3.33) = 3LU_DA, B, C, DROUND(3.33 + 6.66 + 3.33 + 10) = 23LU_EEROUND(2.5) = 2LU_FE, FROUND(2.5 + 5) = 7LU_GF, GROUND(5 + 7.5) = 12LU_HG, HROUND(7.5 + 10) = 17F1A, B, C, D, E, F, G, HROUND(3.33 + 6.66 + 3.33 + 10 + 2.5 + 5 + 7 + 7.5 + 10) = 55F2D, HROUND(10 + 10) = 20F3A, FROUND(5 + 3.33) = 8Browse:Allows seeing an object in the Folder List and Object Viewer.Use/Execute:Allows the usage of an object needed for execution, for example, a filter that must be used in a report execution.Read:Allows viewing the object's definition and Access Control list.Write:Allows the modification of the object definition, but not the object's Access Control list.Delete:Allows deletion of the object.Control:Allows modification of the Access Control list of an object and takes ownership of an object.


  • Inheritable: Applies only to folders. If set, any objects placed in the folder will inherit the folder's entry in the Access Control list.
     
ka02R000000kXzIQAU_0EM440000002GIt.jpeg
  •  
     
    Apply permissions to all children objects:
    The immediate child object contains at least 'Everyone' and 'Administrator' permissions in addition to the permissions that are already set. These two permissions are added to the child object.
     
    Overwrite children's access control lists:
    Based on the selected object, 'Everyone' and 'Administrator' permissions replace the immediate child objects' permissions.
     
    Recursively:
    'Everyone' and 'Administrator' permissions are applied to all children and grandchildren objects, in addition to the permissions already set on those objects.
     
    If both 'Overwrite children's access control lists' and 'Recursively' are checked, then 'Everyone' and 'Administrator' permissions replace all other permissions in children and grandchildren objects.
     

 
NOTE: Server objects have a different set of permissions than other objects in the system.
 

Comment

0 comments

Details

Knowledge Article

Published:

June 12, 2017

Last Updated:

June 12, 2017