Restrict Access to Data Using Row Security
This applies to: Visual Data Discovery
Users with appropriate permissions can manually restrict the data in a data source configuration that can be viewed or used by group, account, or user. By default, all data in a data source is available.
Row security filters allow you to secure potentially confidential data within a data discovery data source. Selected users or group or account members would only be able to view limited information within the data it collects.
-
an administrator.
-
User in a group that has been granted the Administer Sources privilege.
-
User in a group that has been granted the Manage Source Permissions privilege who also has read permission for the data source.
Security filters will not be applied to users with the privileges mentioned above. Source administrators can manage security filters for regular users but not for other source administrators.
If a user is included in more than one row security filter for the same data source (via group, user, or account specifications), an error message appears when the user tries to view a dashboard using the data source. This occurs because of the row restriction conflicts set by the different row security filters. Note that if a user is included more than once in a single row security filter (either as an explicit user, a member of more than one group, or as a member of the account), no error occurs because it is a single row security filter.
A "Data Unavailable" message appears when an error occurs obtaining data from a data source for a row security filter. In addition, if a row security filter returns no results, a "No search results" message appears.
Row security is supported by the API endpoint /api/sources/<source-id>/security/filters.
API documentation is provided with your Symphony installation at this link: <symphony-URL>/discovery/swagger-ui.html.
This section covers the following topics: