Set Up Data Filters in the Semantic Model
You can assign data filters for specific application roles to enforce row-level security rules in the semantic model.
To create filters, you select objects from subject areas where you want to apply the
filters and then you provide the filter expression information for the individual
objects. For example, you might want to define a filter like "Sample
Sales"."D2 Market"."M00 Mkt Key" > 5 to restrict results based on a
range of values for another column in the table.
You can also use semantic model and session variables in filter definitions.
When a semantic model object such as a logical fact table is accessed by multiple application roles with different levels of access, you can create functional groups to prevent application roles from viewing data restricted from view by that specific application role.
For example, suppose you want your regional sales associates to see the revenue for a quarter in their assigned region, but to avoid exposing sensitive information you want to prevent your regional sales associates to see to total segment sales for all of the regions, In this scenario you create functional groups with different levels of access as appropriate for the specific application role to the filter. See Specify a Functional Group for a Data Filter's Application Role.
- On your home page, click Navigator
and then click Semantic
Models. - In the Semantic Models page, click a semantic model to open it.
- Click Logical Layer
or Presentation Layer
and double-click the table where you want to set up data filters. - Click the Data Filters tab.
- In Add, search for and select the application role that you want to set the data filter for.
- Click Open Expression Editor.
- In the Expression Editor, define the condition using the semantic model objects and operators.
- Click Save.