5.4 Data Level Security

This topic describes how the data administrators can restrict access to the users to instrument and management ledger tables based on specific dimensions.

A user-friendly UI helps you to enforce this security at the row level.

Data Level Security enables administrators to control access to records by segmenting them based on specific dimensions. By default, users who are not included in the data level security mapping can view all available records in corresponding instrument and management ledger tables. However, once a visibility mapping is applied, users are limited to records that match their assigned values.

This feature ensures that users can only access data relevant to their assigned dimensions, enhancing both security and data management.

To implement Data Level Security:

1. From the LHS menu, select Data Management Tools, and then select Data Level Security.

   Figure 5-32 Data Level Security

   
   

   

   
   
   The Data Level Security window opens in another tab and displays the following existing details:

   • Dimension Name: The Dimension Name selected by the user for restriction.
   • Dimension Value: The Dimension Value.
   • Created By: The user who create the rule.
   • Creation Date: The day on which the rule is created.
2. You can select a row from the summary screen and click Unmap to remove the assigned restrictions.
3. Click New Visibility Mapping if you want to create a new mapping rule. The Add Mapping window is displayed.

   Figure 5-33 Add Mapping

   
   

   

   
   
4. Select the following details:
   • User ID, Username: The user for which you want to add the restructions.
   • Select the relevant values for the following:
     • Legal Entity
     • Org Unit
     • Rel Manager
     • Location
5. Click Map. The new mapping details will be saved and displayed on the summary screen. Once the user logs out and logs in, he/she can only the records containing the assigned values.
6. You can select the Edit icon for a particular row to change the existing restrictions.

   An Edit Mapping screen is displayed.

   Figure 5-34 Edit Mapping

   
   

   

   
   
7. Change the relevant details and click Map. You can change the dimensions Legal Entity, Organization Unit, Relationship Manager, and Location. The changed mapping details will be saved and displayed on the summary screen.

   Once the user logs out and logs in, he/she can only the records containing the assigned values.