Overview
Security filters improve data governance and user experience by enforcing role-based visibility across analytical and operational tools. Each security filter is configurable using key-value pairs that can be assigned to user groups to restrict data access on DQ reports. This enables fine-grained data segmentation, ensuring users can only access data that is relevant to them.
This feature is an extension of the centralized security model, which supports business-driven data segmentation. It ensures the right users can view and act on specific subsets of data, such as filtering by company code, plant, or ZDEPLOY.
Security filters allow you to:
Define specific filters with customizable key-value pairs.
Assign filters to user groups, which inherit filters through assigned security roles or profiles.
Restrict data access based on allowed key values per user group.
Create a Security Filter
New security filters can be created to help restrict data access per user group. To create a new security filter:
Verify you’re in the Admin module of the Syniti Knowledge Platform.
Or
Select Admin from the Profile menu to navigate to the Admin module of the Syniti Knowledge Platform.
Click Security Filters in the Admin menu.
Click Create security filter.
Enter a Name (required) and Description (optional) for the security filter.
Select the system Datastore the security filter is associated with.
Select the Dataset associated with the selected datastore from which the name-value pairs should come. Available fields will populate from the selected dataset.
Where necessary, select fields as the Key and Description fields using the respective checkboxes.
Note
Multiple key values can be selected, but only one description value can be selected.
Click Fetch values. The values from the selected fields are pulled from the dataset.
Verify that the values displayed are the desired values. If not, repeat steps 4 - 8.
Note
Key values cannot be changed after saving the security filter. It is important to ensure the correct key values are selected before saving.
Click Save.
Assign Key Values to a User Group
After creating a security filter, a user group must be added to the security filter, and key values must be assigned to the user group.
To add a user group to the security filter:
Verify you’re on the security filter Details page.
Click Add User Group.
Select the user group from the User Group list box.
Toggle the Grant All Values option to On to grant members of the selected user group full access to all current and future values for the security filter.
OR
Individually select the key values you wish to grant members of the selected user group access to.Click Save.
Once a user group has been added to the security filter, the key value assignments can be adjusted in the Key Values grid by toggling the Apply to Group option on or off for individual key values.
Alternatively, you can toggle the Grant All Values option on to give members of the selected group full access to all current and future values for the security filter.
Assign Security Filters to a DQ Report
Data access can be restricted on Data Quality reports by assigning security filters to a DQ report. To assign a security filter to a DQ report:
On the implementation Overview page, click the More actions (…) icon and choose Edit. Refer to Add an Implementation to an Enforcement for more information on implementations.
On the Edit Implementation page, click Security Filters. The Security Filters window displays.
Click Add.
Select a security filter from the Filter Name list box in the Security Filters grid.
Select a value from the Report Field list box in the Field Mappings grid to assign field mappings.
Click Save to apply the security filter to the implementation.
Click Save to save the implementation.
Once saved, only users assigned to the user group specified in the security filter will have access to the associated data in the report. Only data associated with the key-value pairs applied to the security filter will be included in the DQ report for those users.
Edit a Security Filter
Once saved, security filter key values cannot be edited. However, the values can be refreshed in instances where the selected dataset values have been updated at the system datastore level.
Only the security filter name and description can be edited.
To edit a security filter:
Verify you’re in the Admin module of the Syniti Knowledge Platform.
Or
Select Admin from the Profile menu to navigate to the Admin module of the Syniti Knowledge Platform.
Click Security Filters in the Admin menu.
Click the Edit security filter icon on the security filter you want to edit.
If necessary, update the security filter Name and Description fields.
Click Refresh values to refresh the dataset fields.
Click Save.