Versions Compared

Old Version 2

changes.mady.by.user Sarabjeet Kaur

Saved on

compared with

New Version 3

changes.mady.by.user Sarabjeet Kaur

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Applies to: (tick) Kyvos Enterprise  (tick) Kyvos Cloud (SaaS on AWS) (tick) Kyvos AWS Marketplace

...

Panel
panelIconIdatlassian-note
panelIcon:note:
bgColor#DEEBFF

Note

  • Column masking is not applied to Member Properties, Unknown and Calculated members, and Predefined time type hierarchy.

  • Currently, column masking does not support the SQL interface.

  • The original column data is preserved while masking because numeric data is masked with a number, and a date is masked with a date. You can specify a fixed pattern or a Regex expression for any string data type. 

  • The masked value is displayed while browsing the semantic model on any BI tool with an MDX connection. 

  • If using Tilde (~) for column masking and want to apply a filter on the masked value from Kyvos UI, then you must change the value of the field value separator as the default value of the kyvos.filter.value.separator property is also Tilde (~). Hence, you must change the default value of this property so that column masking with the Tilde character can function.

  • To apply column masking to a pre-defined hierarchy, you need to select the full name of the hierarchy.

  • You can create, delete, update, save, and assign column security (masking) rules by using the Security Rest API's.

To mask column data for Column Level Security (CLS), perform the following steps. 

...

  1. From the Toolbox, click Semantic Models.

  2. Select the semantic model name from the list and click the Build tab if needed.

  3. Click the Actions menu (...) in the work area and then click Data Security.

  4. Click users or groups that this rule will apply.

  5. Click the plus sign in the Rules column.

  6. Add a rule name and description.

  7. Click Row Level.

  8. Specify the field name and for criteria choose the parameter. Then select an LDAP custom attribute.

  9. Click Add.

Row level security on

...

Key field

Kyvos allows you to set Row Level Security (RLS) on field column key field value to save time and resources as the description (display field) is changing very frequently as per the business requirements so you can apply RLS on a Key field value (to save time and resources. While browsing a worksheet, filters applied to a key field will be respected, and the display field value corresponding to the key value will be shown instead of displaying all values.

Points to know

  • This functionality is applicable only when the Hierarchy/attribute contains description (display field).

  • Users with administrator privileges can set up RLS on field values or display values.

  • You cannot apply row-level security to the key field with a date type or predefined time hierarchy.

  • You cannot apply row-level security to the key field if the display field is not set for that key field.

  • Applied filters will execute properly with no impact on query performance.

 

To define a parameterized RLS filterapply RLS on Key field, perform the following steps:

  1. From the Toolbox, click Semantic Models.

  2. Select the semantic model name from the list and click the Process tab if needed.

  3. Click the Actions menu (...) in the work area and then click Data Security.

  4. Click users or groups that this rule will apply.

  5. Click the plus sign in the Rules column.

  6. Add a rule name and description.

  7. Click Row Level, and then select the click the field link, and then select the field on which you want to apply the RLS security on key field column.

    Image Added