To grant access to multiple analytical objects, which construct would you typically use?

To grant access to multiple analytical objects, which construct would you typically use?

• A. A single custom duty role.
• B. Separate duties for each object.
• C. A dedicated analytical object per user.
• D. A global all-access role.

Answer: (A)

Grouping access with a single custom duty that covers the analytical objects is the practical approach. A custom duty acts as one security unit that contains all the privileges needed to work with multiple analytical objects, so you can grant access by assigning that duty once rather than juggling many separate permissions. This makes security easier to manage and less error‑prone when users need access to several objects. Splitting into separate duties for each object creates administrative overhead and maintenance burden, while giving everyone global all-access is unnecessarily broad and risky. Creating a dedicated analytical object per user is impractical for scalable access management.

Grouping access with a single custom duty that covers the analytical objects is the practical approach. A custom duty acts as one security unit that contains all the privileges needed to work with multiple analytical objects, so you can grant access by assigning that duty once rather than juggling many separate permissions. This makes security easier to manage and less error‑prone when users need access to several objects. Splitting into separate duties for each object creates administrative overhead and maintenance burden, while giving everyone global all-access is unnecessarily broad and risky. Creating a dedicated analytical object per user is impractical for scalable access management.