Quick BI:Column-level Permissions

Procedure

1. Log on to the Quick BI console. You can access the Column-level Permissions configuration page from the following entry points.

   1. Entry point 1: In the dataset list on the Workbench tab, select the target dataset to access the Column-level Permissions configuration page.

      

   2. Entry point 2: On the dataset editing page, click Advanced Configuration in the top toolbar and select Permission Control -> Column-level Permissions.

      

   3. Entry point 3: When you create a dataset, click the icon to access the Column-level Permissions configuration page.

      

2. Turn on Enable Column-level Permission Management Feature.

   

   After you turn on Enable Column-level Permission Management Feature, you can configure permission rules for the specified fields and other fields.

3. Click Add Rule.

   

4. Configure permission rules for specific fields.

   

   1. In the Column-level Permissions panel, select one or more fields. You can configure multiple fields at a time and configure date fields (which can be displayed only in workbooks or kanbans). Set View Rule to View Prohibited or Data Masking.

      The users for whom the permission rule takes effect cannot view the values of the selected fields or can view only the masked values.

   2. Specify the users for whom the permission rule takes effect.

      You can specify the users for whom the permission rule takes effect. Valid values: Valid to All, Invalid to All, Valid for Selected Users Only, and Invalid for Selected Users Only.

      Authorization object	Description
      Valid to All	When you later view the values of the specified fields above: The configured column-level permission rule takes effect for all users.
      Invalid to All	When viewing the values of the specified fields later: The configured column-level permission rule does not take effect for any user.
      Valid for Selected Users Only	After specifying users or groups, you can view the values of the specified fields: For the specified user or user group: The field values are restricted based on the configured permission rule. Users cannot view the fields for which View Prohibited is selected or can view only the masked field values. For users other than the specified user or outside of the specified user group: You can view the complete field values without being restricted by permission rules.
      Invalid for Selected Users Only	After specifying a user or user group, you can view the values of the specified fields mentioned above. For the specified user or user group: You can view the complete field values without being restricted by permission rules. For users other than the specified user or outside of the specified user group: The field values are restricted based on the configured permission rule. Users cannot view the fields for which View Prohibited is selected or can view only the masked field values.

   3. Click Complete.

5. Configure permission rules for other fields.

   Fields that are not selected from the Select Fields drop-down list are considered as other fields.

   • If you select View Allowed for Other Fields, users for whom a permission rule takes effect can view other fields.

   • If you select View Prohibited for Other Fields, users for whom a permission rule takes effect cannot view other fields.

6. Click Complete.

7. Add users to a whitelist.

   Users that you add to a whitelist are not restricted by permission rules. The users can view all fields in a dataset.

Copy column-level permissions

1. Access the Column-level Permissions configuration page.

2. When column-level permissions are not enabled for this dataset, you can click Copy permission rule on the description page or Rule replication in the upper-right corner, select a dataset in a workspace, and click OK.

   

   When the dataset has column-level permissions enabled, you can copy the column-level permissions through Rule Replication in the upper-right corner.

   

   Note

   You can copy only the datasets for which you are a workspace administrator or dataset owner.

3. After you click OK, the column-level permission copy configuration page appears.

   

   The copied dataset can be modified.

   

   1. Field Matching

      The system automatically matches field rules. You can manually select fields to modify.

      

      Note

      Only the fields with configured rules in the copied dataset are displayed. Make sure that the fields can be mapped one-to-one.

   2. Rule Processing

      1. The Rule Copy Method can be Incremental or Replace.

         Incremental retains existing rules and configurations and adds missing rules.

         Replace clears current rules and configurations and replaces them with new rules.

      2. The whitelist is synchronized based on the copy method.

4. Click Confirm and Preview to complete the copy of column-level permissions.

   You can click Details in the Actions column of a rule to view the specific rule content.

   If you need to modify field configurations and rules, you can click Field Configuration and Rule Processing to return to the previous step.

   

5. Click Confirm and Close to save the column-level permission settings. You can continue to edit the permission rules for the dataset. For more information, see Procedure.

Examples and rule descriptions

View prohibited

• Prohibition rule

  Configure Analyst A to be prohibited from viewing the Customer Name field.

• Example

  In the pivot table, Analyst A cannot view the Customer Name field.

Data masking

You can configure view permissions for data fields for different users. For example, you can mask a field for certain users and set different masking rules.

The permission rules and their corresponding effects are as follows.

• Masked field: Full Masking

  The specified masked field is displayed as six asterisks (*), and the field value is completely hidden.

• Masked field: Mask Middle Characters

  The middle characters are hidden, and three characters are retained at the beginning and end.

• Masked field: Mask Head and Tail Characters

  The characters at the beginning and end are hidden, and three characters are retained in the middle.

• Masked field: Custom Masking Rule

  All characters except the specified characters are hidden.

  • Keep First n Last m

    In this example, the first two characters and the last two characters are retained.

    

  • Keep First n to m

    In this example, characters from position 1 to position 3 are retained.

  • Mask Before Special Character

    

    The following figure shows the output:

    

  • Mask After Special Character

    The following figure shows the output:

    

  • Keep Special Character

    

    The following figure shows the output: