One of the key advantages of dynamic security is the ease of management. With fewer roles to manage, user management can be as simple as maintaining a single user security table (listing the user name and the sales level and node where they are authorized) and a domain group for such cube users. One common approach to limiting a user’s data set is to simply limit the facts that they can access. By limiting facts you inherently limit the dimensions that would be connected to them. This dynamic security approach becomes especially useful when exposing drillable hierarchies in reporting applications. Since the user is limited in the Cube, the application doesn’t require additional security to lock down data.