MDM Data Security/Syndication Question

Hi,
   Is it possible to setup security profile in a way to restrict Qualified table data? For example A customer record looks like :
Main table:
CustomerNumber               Type                        SalesData
A1                           Internal                1001, 1009
A2                          External                1002, 1005
Sales Data is a qualified table with sales org. I want to setup a role wherein a user has access to sales org 1001 records only. So if that user logs in he should see only :
A1                         Internal                     1001
Also similarly for syndication is it possible to syndicate the main record with only selected qualified records? (same as above)
Harsha

Hi Harsh ,
Its very much possible .
You have to define these roles in console .
Admin - Roles - Tables and Fields - Constraints
Here , you define the sales org 1001 in constraints field for your qualified table .
Now define a user with this role .
If you need more info . pls let us know ,
- An .

Similar Messages

  • Data security for multiple data sources

    Dear BO guru's,
    I am struggling with a brainbraker on authorizations on Universes since quite some time.
    I am not a BO guru so hopefully someone can help me with this.
    I (more or less) know the concept of data security in BO: users can be restricted on data level in (mainly) two ways:
    1) with roles in CMC and with restrictions in Universe Designer.
    OR
    2) with a DB table that contains all authorized values per user and per field (i.e. John can see data for country UK)
    The first is easy to set up, but hard to maintain.
    The second is difficult to set up, but very flexible.
    Now here is the problem...
    Supporse your BO server is connected to different source systems (i.e. an SQL server, an Oracle server...) and you want only one universe to get data from all systems at the same time and display it in one report.
    If I am not mistaken, this means we need a data federator.
    ...My questions:
    1) Is there a possibility to do this without a data federator (but still have one universe to build my report or dashboard on)?
    2) Where do I keep the table with authorizations for the users? Is that a database of the BO Enterprise server, a seperate data base, or in a table of one of the source systems (SQL, Oracle...)?
    As this questions keeps me busy since long time, I would be very grateful to have your help.
    It seems hard to find information on this.
    Thanks a lot in advance!
    UniverseDummy

    1) Is there a possibility to do this without a data federator (but still have one universe to build my report or dashboard on)?
    Apart from the Data Federator, you can either use an ETL tool to load your data into a single Datawarehouse or wait until XI 4.0
    2) Where do I keep the table with authorizations for the users? Is that a database of the BO Enterprise server, a seperate data base, or in a table of one of the source systems (SQL, Oracle...)?
    If you are going to use the Data Federator then you can create the table in one of your source systems and add it as a data source in your DF project.
    Regards,
    Stratos

  • MDM 5.5 related questions

    Dear Roman,
    We have been reading all of your blogs and articles on SDN.
    We have many questions related to SAP MDM 5.5, few of which are listed below:
    Q1.  Whether cross compatibility for different ERPs will be provided or not? (for Siebel, PeopleSoft etc)
    In case of MDM 3.0, it was supposed to be developed on Project Basis.
    [Rytov, Roman] Since MDM is an SAP's product I don't know (and don't think) any transformation vehicle will be provided for 3-d party products out of the box. On the other hand, anyone can get all necessary knowledge to bring external data into MDM and back. I've been working with several customers placing MDM as a data hub (a scenario that for some reason hasn't gotten a separate bullet in the MDM scenarios diagram but widely adopted by customers). So you can bring data from external systems to MDM (by either the APIs or with help of the ImportManager) and distribute it back to the same (or other) systems leveraging the Syndicator or the APIs again. 
         [Satyen] With the help of APIs/ Import manager, we can get the data from external systems into the SAP MDM but then <b>we need to have functional knowledge</b> to do mapping manually between MDM business objects and different business objects as Material from CRM, Business Partner from CRM, Business partner Relationships from CRM. In one of the blogs by Kevin Isaacson , it’s mentioned that SAP MDM is packaged with predefined repository and import maps for the supported objects like material, vendor, customer.
         1. So what’s the exact scenario for cross-client support? Do these import maps provided by SAP support external systems like PeopleSoft, Siebel?
         2. In the SAP MDM 5.5 Import Manager document provided by SAP, it’s not talking about client connectivity but only about how import can be done? Where can we find this information?
         3. Is XI completely removed from IT scenarios? If yes, then how is it going to take care of data transfer with different data sources?
         4. Can you please elaborate more about DATA HUB scenario? I believe, Oracle is also coming with similar technology to SAP MDM which supports only Central Master Data Management scenario. In Oracle terminology, they call it Central Data Hub (CDH).
    Q2.  Can we build a legacy system on top of Central Repository? If yes, how? Is Reverse Engineering possible?
    [Rytov, Roman] I'm not sure I understood the question but you may probably treat your MDM system similar to a RDBMS with an additional intelligent layer. In this light you can build on top of MDM whatever you want by using either the APIs only or by leveraging the ImportManager and the Syndicator. I tell you that one of the customers that uses MDM as a data hub at the same time in another MDM repository stores exceptions and other technical messages occurring during integration workflow with external systems. So they have a workflow module which uses MDM as a persistence (MDM itself) and a presentation layer (the client) for managing exception handling. Only your fantasy and the common sense limit applicability of MDM.
         [Satyen]  I understand that by using APIs, we can access the underlying RDBMS tables of MDM repository but then
           1. how can we link the complex relationships maintained between Main Table & various Lookup tables, main table & special tables?
           2. I believe the data in the MDM repository is maintained in a very complex way (Delimiter separated) and is manipulated on the fly by the C++ code using pointers & rich/efficient string operations. So how can we access it directly and make use of data from the repository?
           3. In case of WorkFlow module, since it is quite independent of Main table and lookup table linkages, we can make use of it for persistence but then for other modules, it must be quite complex thing to do so.
    Q3.  Will there be separate repositories for IT scenarios, GDS & Catalog publishing?
    [Rytov, Roman] GDS is a separate application although built upon MDM. It has its own repository which can be accessed from the client. I don't know if there are any limitation on such concurrent usage. I have to check it and will come back to you.
         [Satyen] We attended the Webinar hosted by Klaus David on GDS 1.0, as per that GDS maintains it’s own repository which can co-exist along with MDM repository on the same DBMS server but then in MDME, which mainly covers business scenarios only, does not really talk about Master Data harmonization, central master data management.
         1. If it is the case, then don’t you think it’ll be duplication of efforts for maintaining various repositories for GDS, MDME & IT scenarios?
    Can we have an illustrated difference between Qualified field, Qualifiers, Product families & Data Groups?
    [Rytov, Roman] It's a big topic but in a few words the answer is: Qualified fields and qualifiers are means and tools of qualifier lookup tables. I'm writing now a set of articles talking about it and update you when it's ready. Product families are similar to virtual taxonomy. So you create an additional level of your taxonomy but virtually, choosing attributes to classify it. No additional branches are created. Data group is just an hierarchical structure for storing binary objects (PDF, TextBlocs, Images and others). It helps organize not structured binary data and link it later to your catalog's objects.
         [Satyen] We understood about the product group.
         1. Can you provide the exact definition of Qualifier? Whether is it a part of Main table or Qualified Lookup table?
         2. What’s the exact difference between Sub-category and Product family? As per SAP document, the product family is a kind of taxonomy with some common Fields AND/OR Attributes. Can you provide some example about it?
    How data is harmonized in SAP MDM 5.5? What is the difference between Syndicator, GDS & SCM?
    (Don't they have overlapping functionality?)
    [Rytov, Roman]  Let's see. The Syndicator is a tool opposite to the ImportManger - to export data from MDM to flat or XML file (currently implemented formats). GDS is an application for retail market built upon MDM. SCM - isn't it a SAP-based (ABAP) application? I'm not from the ABAP world so I don't know it. But there are few SAPBased applications having master-data module built in. Depending on business needs and technical requirements such modules can keep on serving their roles with or without integration with an external MDM. I'm trying to say again that there are no predefined MDM scenarios and some customer may wish use it as a central point of truth but others as a cleansing gate or a translator hub. An architect team should understand capability and cost of every module and in every concrete case make appropriate decisions.
         [Satyen] According to the SAP documents, we can use Syndicator to syndicate data with UCCNet, Transora (both of which are now going to merge).
         1. If it’s the case then why GDS is separately required in whole MDM scenario? Is it not overlapping the functionality of each other? Then how GDS can become a separate Business Scenario for SAP MDM 5.5?
    Let me ask you a few questions. Did you take the basic standard 4-day course about MDM5.5? It's mandatory to kick off MDM learning and understanding.
    [Satyen] Now in second week of August, we are going to attend the 5 days workshop conducted by SAP at Bangalore, India which can help us in understanding SAP MDM 5.5 in a much better way!
    To understand how MDM fits to a system landscape I advise you to listen to my e-Book if you haven't yet found it:
    https://www.sdn.sap.com/sdn/url.sdn?res=/irj/servlet/prt/portal/prtroot/com.sap.sdn.wcm.compound.docs/library/events/webinars/mdme in your it landscape/mdme 5.5 in your it landscape
    [Satyen] Thanks for providing the URL. It’s really useful! Is there any way by which we can download this presentation with audio?
    We're developing a 2-day workshop for advancing MDM data modeling which will mostly be comprised of hands-on experience and brainstorming discussions. It's planned somewhere in October but for now it's not clear when and where it will be given.
    [Satyen] It’s definitely going to be very helpful to everyone as in SAP MDM 5.5, you can design the repository in various ways. So these discussions/brain storming sessions will be really useful to everyone. Please let us also know about it.
    Good luck with MDM!
    [Satyen] Once again thanks for everything!!
    Roman
    Thanks in advance.
    Regards,
    Satyen
    Satyam Computer Services Ltd.
    Pune, India.

    Resolved

  • Using Data Security under Functional Developer / User Manager

    Has anyone succesfully carried out any Data Security policies in Oracle Apps. I would like to get details on this.
    Thanks in advance.

    Actually the other scripts on the http://www.petefinnigan.com/tools.htm site seem to do the trick where you can check for who has DBA and who has SELECT ANY TABLE.
    The next questions is .... what other privs should I be concerned with? Just want to make sure I am checking for all possibilities of access to a particular object.

  • Data Security in vCloud Air

    Not being a security expert but more of a data at rest question,are countries where data security is a requirement able to prove that vCloud Air will only leave data in their country of origin and is there a document that states that a workload will reside in 1 datacenter and not move to another one ?

    Actually - there is a document that says this... it's in our Data Privacy Addendum- a part of the legal Terms of Service.
    2.8  Transfer of Data. You will select the location of Your Content. You consent that we will store Your Content in the location that you choose when you purchase a specific Service Offering. By uploading Your Content into the Service Offering, you may transfer and access Your Content from around the world, including to and from the location in which Your Content is maintained. To the extent you provide Your Content in connection with customer support, you acknowledge and agree that we may handle Your Content in any country in which we or our subcontractors maintain facilities. If you are a customer in the European Union or Switzerland, you acknowledge and agree that the Service Offering storage location you choose for Your Content, and the location in which Your Content is Processed for customer support, may be in countries where the laws do not protect your personal information to the same extent as the laws in your country. We will implement measures to ensure that we provide adequate protection for Your Content that we Process on your behalf. To this end, we will maintain an appropriate safe harbor certification with the US Department of Commerce (or an equivalent data export solution) when you transfer Your Content to us from the European Union or Switzerland. - See more at: https://www.vmware.com/support/vcloud-air/data-privacy-addendum.html#sthash.CBYM8UBm.dpuf

  • Regarding MDM Import and Syndication Server

    Hi,
    I have earlier worked in MDM Import Server.
    Today, I successfully did MDM Syndication by
    MDM Syndicator.
    Now, the point is I need to do Import and Syndication
    by MDM Import Server and MDM Syndication Server.
    The MDM Version is 5.5.
    Now, the point is under my installed directory:
    F:\MDM SERVER\Server
    in mds.ini file:
    I need to give the following path:
    Distribution Root Dir=F:\MDMSER~1\Server\Distributions\
    I think other than these I don't have to do any configuration
    in mdis.ini or mdss.ini.
    Also, I have already inbound and outbound ports made and linked
    to inbound and outbound maps.
    Is there any more configuration needed?
    Regards
    Neha Singh

    Hi Neha,
    There are many configuration needed to complete the Automatic import and syndication using MDIS and MDSS.
    Please go through the link below for the same:
    Master Data Management Import Server and Master Data Management Syndication Server - Webinar Powerpoint
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/8973bcaf-0801-0010-b7a7-f6af6b1df00e
    This will give you the complete steps to perform the same.
    Hope it helps.
    Thanks and Regards
    Nitin Jain

  • SAP BOBI 4.0: Data Security Profile Issue

    Consider the below scenario :
    We have two environments(SAP BOBI 4.0): Dev and Prod
    Schemas used are test and testABC in DEV and Prod respectively. And structure (table
    names and column names) inside both the schemas is same.
    We have created several data security profiles in Dev
    environment. So now when we migrate via Promotion Management, the universe from Dev to Prod, “data
    security profiles” also gets migrated.
    So once migrated we change schema name from test to testABC
    in data foundation layer which makes our dfx to point to testABC schema in
    Prod.
    Once above process is done when we go to data security
    profiles, table names gets changed from test to testABC But inside WHERE
    Clause, schema name is still test it doesn’t gets changed to testABC.
    Now question is  :
    Is there any way so that schema name inside
    WHERE Clause should get changed automatically from test to testABC?
    Is there any way we can restrict Data Security
    profiles to get migrated when we are migrating the universe?

    What is your data source? Did you try to edit the security profile in where clause?
    Is there any way we can restrict Data Security
    profiles to get migrated when we are migrating the universe? - You can only exclude to promote User/Folder/Object security, not inside the Universe.

  • What sort of Wireless Data Security does the iPhone have/use?

    During transmission of data, is it encrypted? I'm aware that the BlackBerry Enterprise version uses AES to secure data during transmission. Does the iPhone use this as well, or another standard? If so, is this feature included on all iPhone models/classes? I'm not sure if the iPhone for business is tangibly different than the iPhone sold to non-business individuals/families - or if the AT&T phone plan is the only thing which differs.
    Thanks to anyone who addresses my questions regarding security.
    Jimixsix

    Keep in mind that any phone can be set up to get email without any kind of data security. The Blackberry can bet set up to do POP, SMTP, etc. over an un-encrypted link. In these cases there is no AES used.
    The BBs encryption is only between the handset and BES or BIS server. Although the BB does encrypt data on the phone, this is only as effective as the PIN - if the phone is unlocked all data is available.
    The iPhone defaults to using SSL for encryption of data on the wire, but this can be turned off. The phone does NOT encrypt the data stored on it, but incorrect PIN attempts can wipe the phone if configured that way.
    Keep in mind that many of the Benefits of a Blackberry require the BES (Blackberry Enterprise Server) at your organization. Without one, you have no Push email. You have to resort to Blackberry Internet Server (BIS) where you store your credentials on the RIM server and it screen scrapes Outlook Web Access or pulls from POP accounts. You may get AES encryption between handset and server, but you have given up your account credentials to who knows what.

  • What are the corresponding Data Types of some MDM Data Types

    Hi Guys,
    The MDM ABAP API involves creation of a DDIC structure in SRM. This structure should have the same fields with the MDM table fields. We would like to ask the corresponding ABAP Data Types for the following MDM Data Types.
         MDM                                                         SRM
    1.  Look up (flat)
    2.  Look up (taxonomy)
    3.  Look up (heirarchy)
    4.  Look up (qualified flat look up)
    Any significant inputs on this?
    Thanks and regards,
    RE

    Hi,
    Refer the below link. This is from the MDM Reference guide and contains the sample source code as well for almost all the things like creating repository, creating tables and fields etc. It would be helpful to you.
    http://help.sap.com/saphelp_mdm550/helpdata/en/47/5fd3f7cbd75518e10000000a421138/frameset.htm
    Regards,
    Jitesh Talreja

  • Can not Upload PDF in MDM data repository

    Hi, expert,
    when I upload the PDF in MDM data manager, the system error log is :
    Unable to open Adobe Acrobat.
    See your administrator about installing Adobe Acrobat.
    But, when I upload the image, the status is success..
    I do not know if it is Adobe Acrobat installing problem or I miss some configuration or it can not upload the PDF into MDM repository..
    Your help would be really appreciated.
    thanks & Best Regards,

    Hi,
    Can you open the PDF without any error? Is Adobe Acrobat installed on the server where the repository is loaded?
    Regards,
    jason

  • MDM Data Manager Masks, field Shared

    Hi experts,
    while creating a mask in the MDM Data Manager I noticed the field Shared. It can be set to Yes and No.
    Can anyone tell me what this field does? I couldn't find any reference to it in the documentation of the MDM Data Manager, current version, MDM 7.1 SP07, May 12, 2011.
    Best regards,
    Marcus

    Hi Adrivit,
    could you please elaborate a bit more?
    I just created a Mask that is not shared. Then I logged on with another user. That other user can see the mask and select it in the data manager. That other user also see the records contained within the mask.
    I don't see any chenge when I set the Mask to shared.
    Is this something that is related to Roles, maybe?
    Best regards,
    Marcus

  • MDM Data Manager - Freezes at loading Local Searches

    Hi all,
    While the loading the MDM data manager (DM) the application freezes for ~5 min while stating "Loading Local Searches", before the DM is finíshed loading.
    Does anyone know how to solve this problem, or at least where the local searches are stored on the drive?
    Kind Regards,
    Christian

    Hi Christian,
    While the loading the MDM data manager (DM) the application freezes for ~5 min while stating "Loading Local Searches", before the DM is finíshed loading.
    Does anyone know how to solve this problem, or at least where the local searches are stored on the drive?
    As per my knowledge, there may be some reasons for this problem.
    1. There might be a version mismatch between the MDM server and the MDM Data Manager Gui. You can check the verison only when the Data Manager opens.
    However, you can check it for other GUi's and compare it with the MDM server version. ( Even the build version should match).
    2. There might be huge number of records saved in your repository.
    3) You might have changed the repository strutcure which has not been updated throughout.
    There might be some other problem also.
    Possible solutions:
    1. Unload the repository and Load it again with UPDATE INDICES. This might solve the problem at the root itself.
    2)I would suggest you to check your GUI version and upgrade it if its not matching with the MDM server version.
    3)If still not working, you can try-unistalling the DM client and re-installing it again.
    Please note these 2 steps before performing the step 2 and step3.
    Check the repository for errors and if any, then verify it
    Do take a back of the repository from the Console- Use Archive repository.
    Hope it helps.
    Thanks and Regards
    Nitin jain

  • OBIEE-EBS data security integration

    Hi all,
    I am trying to implement the HR-Org based data security in EBS-OBIEE integration.
    After creating the initialization blocks EBS Single Sign-on Integration,Get Oracle EBS Security Context,Group-EBS Responsibility I have created a new initialization block HR Organizations to populate the session variable "HR_ORG" and I am using the following the query.
    Even though the session variables GROUP and USER are getting their values correctly and integration works fine, the variable HR_ORG says "has no value definition".
    [nQSError: 10058] A general error has occurred. [nQSError: 23006] The session variable, NQ_SESSION.HR_ORG, has no value definition. (HY000)
    SQL Issued: SELECT "Per Business Groups"."Business Group Id", VALUEOF(NQ_SESSION.HR_ORG) FROM HR
    Please help me for implementing the data security after the EBS-OBIEE integration..
    For populating HR_ORG variable by row wise initialization:
    SELECT DISTINCT 'HR_ORG',TO_CHAR(SEC_DET.ORGANIZATION_ID)
    FROM
    SELECT
    'HR_ORG', ASG.ORGANIZATION_ID
    FROM
    FND_USER_RESP_GROUPS URP
    ,FND_USER USR
    ,PER_SECURITY_PROFILES PSEC
    ,PER_PERSON_LIST PER
    ,PER_ALL_ASSIGNMENTS_F ASG
    WHERE
    URP.START_DATE < TRUNC(SYSDATE)
    AND (CASE WHEN URP.END_DATE IS NULL THEN TRUNC(SYSDATE) ELSE TO_DATE(URP.END_DATE) END) >= TRUNC(SYSDATE)
    AND USR.USER_NAME = ':USER'
    AND USR.USER_ID = URP.USER_ID
    AND TRUNC(SYSDATE)
    BETWEEN URP.START_DATE AND NVL(URP.END_DATE, HR_GENERAL.END_OF_TIME)
    AND PSEC.SECURITY_PROFILE_ID = FND_PROFILE.VALUE_SPECIFIC('PER_SECURITY_PROFILE_ID', URP.USER_ID, URP.RESPONSIBILITY_ID, URP.RESPONSIBILITY_APPLICATION_ID)
    AND PER.SECURITY_PROFILE_ID = PSEC.SECURITY_PROFILE_ID
    AND PER.PERSON_ID = ASG.PERSON_ID
    AND TRUNC(SYSDATE) BETWEEN ASG.EFFECTIVE_START_DATE AND ASG.EFFECTIVE_END_DATE
    AND URP.RESPONSIBILITY_ID = DECODE(FND_GLOBAL.RESP_ID,
    -1, URP.RESPONSIBILITY_ID,
    NULL, URP.RESPONSIBILITY_ID,
    FND_GLOBAL.RESP_ID)
    UNION
    SELECT DISTINCT 'HR_ORG',
    ORGANIZATION_ID
    FROM PER_ALL_ASSIGNMENTS_F ASG,
    FND_USER USR
    WHERE ASG.PERSON_ID = USR.EMPLOYEE_ID
    AND USR.USER_NAME = ':USER'
    AND TRUNC(SYSDATE) BETWEEN ASG.EFFECTIVE_START_DATE AND ASG.EFFECTIVE_END_DATE
    AND ASG.PRIMARY_FLAG = 'Y'
    ) SEC_DET
    Thx!

    Duplicate post see Re: obiee-ebs  data  security integration

  • Data security (Data from SAP BW) for AD users

    Hi  All,
    I have a scenario.
    BO env : Business Objects 3.1 Sp3
    Sap Integration kit Sp3
    My target is to implement AD SSO & also provide data security for data from SAP BW. Currently there are no roles & authorization defined in the sap System. My plan was
    Step 1:-  Implement AD SSO in Business Objects
    Step 2:  Map the AD users in SAP system
    Step 3:- Crate roles in SAP System
    Step 4:-  Assign the users roles
    Steps 5:- (Not sure) :-  Map the users (Now in SAP) to BO & then aliases them with the users from AD.
    Pleas let me know if this would be correct approach... if not please suggest.... I am kind of new to SAP BO integration with experience in BO admin

    Step 1: Setup Windows AD SSO on your BOBJ server
    Step 2: Import Windows AD groups in BO
    Step 2-  Setup Server-side SNC between BO and your SAP system
    Step 3:- Create roles in SAP System and import them in BO
    Step 4:-  Assign SAP users the created roles
    Step 5: - In the CMC create SAP aliases for your Windows AD accounts
    Step 6: - Setup your reports and/or universe connections to use SSO.
    For more information on server side SNC check the installation guide of the integration Kit.
    Regards,
    Stratos

  • MDM Data Manager step-by-step process with an example

    Hi All,
    I recently started reading MDM. I am clear with MDM-Console concepts. But I have problem with MDM Data Manager. I am confused with data entries in qualified tables, work flows(using microsoft studio), Matching mode- rules(High treshold, low threshold) etc.. I read material posted in forums- but still I am not clear.
    I need a step-by-step process for data entries with *examples*. A good example which covers all Data Manager concepts. PDF's with screen shots, videos any thing would help.
    Please help me......It would be of great help.
    Thanks in Advance.
    Suchir

    Hi Suchir ,
    MDM 5.5 has 4 MDM clients to perform 4 main functionality on the MDM master records.
    - Console- This is where all the Administrative work is performed
    - Data Manager- This is where the actual maintainence work is done on the master data like consolidation deduplication etc.
    - Import manager- Thsi is from where the source matser records are taken into MDM repoistory
    - Syndicator- This is from where teh consolidated master data is send back to the target systems.
    MDM Data Manager is the heart of MDM
    The activities that can be performed in the MDM Data manager are:
    - Data Consolidation
    - Data Validation
    - Data Deduplication
    - Data Assignment
    - Data Governanace
    etc......
    Qualified Table:
    - Qulaified tables are used to store relational records where one field value is determining the other field or fields value.
    - Qualified tables are maintained in Console and can be viewed in Data Manager
    - Qualified Table are viewed under a separate section in Data Manager in the right hand side.
    - Qualified table has Non qualifiers and Qualifiers.
    - Non qualifiers can be seen in the  Qualified table and in the linking Qualified field
    - Qualifiers can be seen separately under the Qualified section in the data manager
    Kindly refer the below link to know more on this:
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/00a15239-684e-2b10-b8ae-b936b7d1c1fe
    Workflows
    - Workflows are designed in MDM for Governanace
    - You can create the MDM workflow using the MS Visio 2003 stencils in the MDM Data manager in the record mode under the workflow table
    - The saved workflow in DM can then be executed either mnaully or automatically based on teh trigger actions
    - The trigger action for teh MDM wf are record Add,Update,Import,Manual
    Kindly refer the below link to know more on this:
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/60559952-ff62-2910-49a5-b4fb8e94f167  (MDM Workflows Overview)
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/90990743-91c0-2a10-fd8f-fad371c7ee40  (Demo of MDM Workflows)
    Matching Mode
    - This mode is exclusively for Master data deduplication
    - We need to create Rules,Strategies,Transformation in MDM data manager in teh record mode
    - Then you need to run these strategies on the selected records
    - Based on your score and threshold set in the strategy MDM will identify duplicate records
    - This score will be seen in teh Matching mode
    - Colour coding is used along with scores to find out dupliactes
    - Green - 100%dupliacte Blue- 50?% Red- No duplicate
    Kindly refer the below link to know more on this:
    /people/michael.reil/blog/2006/05/18/mdm-matching-strategies-for-master-data-consolidation (matching merging in mdm)
    Hope It Helped
    Thanks & Regards
    Simona Pinto

Maybe you are looking for