When to use Security Mode 4?

[macsir]

Any specific scenario?

[tomok]

Setting 4 forces you to use CAM for user and group management. I would think this is for companies that want to tightly control that in one place, instead of a mixture of CAM and native TM1.

Any time you are dealing with security you have to think beyond what would normally make sense to you as a developer. While this doesn't make sense from a systems perspective, meaning why limit yourself to only CAM, when you can use setting 5, which allows a mixture, it does make sense to information security personnel who are only interested in enhancing security.

[macsir]

Thanks, tomok. So, in Security 4, any user in TM1 native groups can't see anything even if they are granted with proper rights on some tm1 objects. But in 5, they can see objects when login if they are with proper rights and even if they are only in TM1 native groups. Am I right?