Not able to restrict user groups from accessing certain entities

Question

We have created user groups and are trying to give them restricted access to certain entities so that they can perform consolidations only for those entities. But even after creating Security Classes (and assigning them to the entities in the metadata) and assigning [Default] security class access as Read Only, the users are still able to access and consolidate all the entities using process control.
Can anyone please let me know how to restrict consolidation to only certain entities?

Answer 1

To solve this you need the following information:
-- What roles do the users have? Anyone with the Administrator role has full access to all classes.
-- Examine the groups. If any users are members of a group which has more access than the users have as individuals, they get the greater access level. You can generate a report which shows all roles for all users including the derived roles.
-- Examine your metadata. Do the entities in question have the classes you intend? If you omit a class (the field has been left blank), HFM treats it like the [Default] class.
With this information we could help you troubleshoot the issue.
--Chris