Quick BI:Mode 1: Authorization based on Combined Conditions

Scenarios

When you need to implement multiple rules that work together to meet detailed permission management requirements, such as ensuring that the office supplies department, home products department, and technology products department can access only data from their respective product lines, we recommend that you use authorization based on combined conditions to configure permissions. This authorization method can flexibly handle various permission configuration requirements and ensure the accuracy and efficiency of permission control.

Limits

• You can configure row-level permissions only in Pro and Professional Edition.

• Only dataset owners and workspace administrators can configure row-level permissions.

  Note

  Workspace developers can configure row-level permissions only for datasets that they create. Workspace administrators can configure row-level permissions for all datasets.

Precautions

• This topic is suitable only for users who purchased or applied for a trial use of Quick BI on or after June 3, 2021. If you do not meet the requirements, update row-level permissions of the earlier version to the new version before you perform operations in this topic.

• During the configuration of row-level permissions, the number of enumeration values for field filtering is limited to 10,000. If you cannot find the corresponding enumeration value, you can manually enter the enumeration value.

Entry point

Log on to the Quick BI console. You can configure row-level permissions for datasets on the Workbench tab or on the dataset editing page.

Entry point 1

Configure row-level permissions for datasets on the Workbench tab.

1. Perform the steps shown in the following figure to go to the Row-level Permissions page.

   

2. Turn on Enable Row-level Permission Management Feature.

   

3. On the Row-level Permissions configuration page, select Authorize Based on Combined Conditions, click Add Rule, and then configure the authorization method and content.

   

4. Click OK.

   The specified user can view only data of the Northeast region.

   

Entry point 2

Configure row-level permissions for datasets on the dataset editing page.

1. Click Advanced Configuration in the top toolbar and select Permission Management > Row-level Permissions.

2. Turn on Enable Row-level Permission Management Feature.

3. On the Row-level Permissions configuration page, select Authorize Based on Combined Conditions, click Add Rule, and then configure the authorization method and content.

4. Click OK.

Entry point 3

Configure row-level permissions when you create a dataset.

1. On the dataset preview page, click the icon to go to the Row-level Permissions configuration page.

   

2. Turn on Enable Row-level Permission Management Feature.

3. On the Row-level Permissions configuration page, select Authorize Based on Combined Conditions, click Add Rule, and then configure the authorization method and content.

4. Click OK.

Grant row-level permissions

1. Turn on Enable Row-level Permission Management Feature, and select Authorize Based On Combined Conditions for Authorization Method.

2. Click Add Rule.

3. In the Visible Content Filtering section, click Add Relationship.

   

4. Configure the authorization rule.

   

   1. Enter a custom rule name (①).

      You can use the name of a rule to search for the rule.

   2. Specify the users to whom you want to grant row-level permissions (②).

      You can grant row-level permissions to All Members, specified users, or user groups.

   3. Configure Visible Content Filtering rules (③).

      1. Click Add Filtering Condition.

      2. Select a filter field and specify the value of the field.

         • If you select a dimension field from the Filtering Field drop-down list, the filter method can be set to Filter By Value, Conditions, or Bind Tag.

           If you select Filter by Value, you can manually enter keyword fields in Fixed Value.

         • If you select a measure field from the Filtering Field drop-down list, the filter method can be set to Conditions or Bind Tag.

      3. Click to switch between the AND and OR logical operators for the rule.

         

   4. Click OK.

   5. If you want to add multiple authorization rules, click Add Rule and repeat the preceding steps.

      

      When adding multiple authorization rules, you can select "AND" or "OR" logic for rule relationships. If you select "AND", all rules must be hit for the authorization to take effect. If you select "OR", hitting any rule will make the authorization take effect.

      

5. (Optional)

   Add users to a whitelist.

   If you do not want to apply the preceding rules to specific users, you can add these users to the whitelist.

6. Grant permissions to other users.

   Users who do not meet the requirements of the preceding rules are considered other users.

   • If you select All Permissions for Other Users, the users can view all data in the dataset.

   • If you select No Permission for Other Users, the users cannot view data in the dataset.

Copy row-level permissions

1. Go to the Row-level Permissions configuration page by using the entry point.

2. When the dataset has not enabled row-level permissions, you can click Copy Permission Rules on the description page or Rule Reuse in the upper-right corner, select a dataset in a workspace, and click OK.

   

   When the dataset has enabled row-level permissions, you can copy the row-level permissions through Rule Reuse in the upper-right corner.

   

   Note

   You can copy only datasets for which you are the workspace administrator or dataset owner.

3. After you click OK, the row-level permission copy configuration page appears.

   

   You can modify the dataset to be copied.

   

   1. Field Matching

      The system automatically matches field rules. You can manually select fields to modify the matching.

      

      Note

      Only fields that have configured rules in the dataset to be copied are displayed. Make sure that the fields can be mapped one by one.

   2. Rule Processing

      1. The Authorization Method is displayed as authorization based on combined conditions or tag-based authorization.

      2. The Rule Copy Method can be Incremental or Replace.

         Incremental retains existing rules and configurations and adds missing rules.

         Replace clears current rules and configurations and replaces them with new rules.

      3. The whitelist is synchronized based on the copy method.

4. Click Confirm and Preview to complete the copying of row-level permissions.

   Click Details in the Operation column of a rule to view the details of the rule.

   If you want to modify field configurations and rules, you can click Field Configuration and Rule Processing to return to the previous step.

   

5. Click Confirm and Close to save the row-level permission settings.

   You can continue to edit the permission rules for the dataset. For more information, see Grant row-level permissions.