Applies to: 
Kyvos Enterprise Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace
...
Security settings allow you to limit access to data by the criteria you specify, such as region or by department (group). Configure data security at the row or column level or both for saved cubessemantic models. You can specify security access for individual users or groups. Right-click an existing rule to modify or delete it. Data security rules can be exported along with the data. Use And or Or to create complex rule conditions. Each rule can have a separate column and row-level security.
...
From the Toolbox, click Semantic Models.
Select the semantic model name from the list and click the Process tab if needed.
From Properties, scroll down to Data Security and choose one of the following as an endpoint source:
Kyvos Internal
CustomRLS: Displayed only if the corresponding JAR files are uploaded through Custom Data Security Configurations on the Kyvos Manager.
Select an endpoint.
Click the Define Rule and Mapping link and select Groups or Users and select the groups or users you want to use or use Search to find them.
For Rules, click Allow All Columns, Allow All Rows, or click the Plus sign next to Rules to add a custom rule.
On the Add Rule dialog, provide Rule Name and Description.
From the Row Level area, select any of the following from Restrict and click the field link and select the field on which you want to apply the RLS.
Click the value link, and the dialog box is displayed where you can search or select the values on which you can apply the RLS. The selected values are displayed in the Selected Values section. The available choices vary depending on the data you are using.
Click Add. The RLS is applied to the selected values.
From Kyvos 2023.5 onwards, you can also apply RLS on the Key value when the Hierarchy/attribute contains description (display field).
Click Row Level, and then select the click the field link, and then select the field on which you want to apply the restriction.the RLS security on key field.
The RLS on Key field is applied to the values.
.png?version=1&modificationDate=1702039437849&cacheVersion=1&api=v2&width=500)
Setting up Column Level Security
...
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
Note
|
To mask column data for Column Level Security (CLS), perform the following steps.
...
From the Toolbox, click Semantic Models.
Select the semantic model name from the list and click the Build tab if needed.
Click the Actions menu (...) in the work area and then click Data Security.
Click users or groups that this rule will apply.
Click the plus sign in the Rules column.
Add a rule name and description.
Click Row Level.
Specify the field name and for criteria choose the parameter. Then select an LDAP custom attribute.
Click Add.
Points to know
...
attribute
...
.
...
Users with administrator privileges can set up RLS on field values or display values.
...
You cannot apply row-level security to the key field with a date type or predefined time hierarchy.
...
You cannot apply row-level security to the key field if the display field is not set for that key field.
...
Applied filters will execute properly with no impact on query performance.
To apply RLS on Key field, perform the following steps:
From the Toolbox, click Semantic Models.
Select the semantic model name from the list and click the Process tab if needed.
Click the Actions menu (...) in the work area and then click Data Security.
Click users or groups that this rule will apply.
Click the plus sign in the Rules column.Add a rule name and description.Click Row Level, and then select the click the field link, and then select the field on which you want to apply the RLS security on key field.
