Row-level security (RLS)

Open the dataset and go to the Fields tab.

For the field you need to configure access to, click or → Access permissions.

In the window that opens, set the RLS configuration in JSON format on the JSON tab:

[
  {
    "allowed_value": "sp-21",
    "pattern_type": "value",
    "subject": {
      "subject_id": "ssxiy********",
      "subject_name": "user:ssxiy********",
      "subject_type": "user"
    }
  }
]

Where:

• allowed_value: Grant access to all rows with specified field value. You need to specify the value only if pattern_type is set to value; otherwise, it takes the null value.

• pattern_type: How to grant the access:

  • value: For the specific field value from the allowed_value field.
  • all: For any field values. In this case, allowed_value must be null.
  • userid: Control access at data source level.

• subject: Description of the subject getting the access:

  • subject_id: ID of the user or group to grant access to. Specify * if subject_type is set to all or an empty value if it is set to userid.

  • subject_name: Name of the user to grant access to. Specify * if subject_type is set to all or the userid value if it is set to userid.

  • subject_type: Who will get the access:

    • user: Grant acces to a specific user. In this case, you need to specify the user ID and username in subject_id and subject_name, respectively.
    • group: Grant access to a user group. In this case, you need to specify the group ID and group name in subject_id and subject_name, respectively.
    • all: Grant access to all users. In which case you need to specify * in subject_id and subject_name.
    • userid: Control access at data source level.

You can set multiple rules by describing each one in an object with the specified fields.

Click Save.

Save the dataset.

In the source, add a field with the DataLens user IDs to use for filtering. You can add this field to a new table and join it using the JOIN operator.

Add a field with user IDs to the dataset:

• If you added a field to an existing table, go to the Fields tab in the dataset and click Update fields at the top of the screen. The user ID field will appear in the list.
• If you added a field to a new table, join it using the JOIN operator. To do this, go to the Sources tab in the dataset and drag the new table to the workspace. The table will be automatically linked with the existing table. If required, edit the link between the tables and remove duplicate fields left after the join.

Configure field access permissions:

1. In the dataset, go to the Fields tab.

2. Find the field with user IDs. On the right side of the row, click and select Access permissions.

3. In the window that opens, set the access permissions for the field:

   Interface

   JSON

   1. In the RLS settings window, on the Tables tab, click Add rule.
   2. Select User IDs for the Who has access parameter.
   3. Click Save. Access will be granted to users whose IDs are specified in the field.

   1. In the RLS configuration window, set the RLS configuration in JSON format on the JSON tab:

      [
         {
            "allowed_value": null,
            "pattern_type": "userid",
            "subject": {
            "subject_id": "",
            "subject_name": "userid",
            "subject_type": "userid"
            },
         }
      ]
      

   2. Click Save. Access will be granted to users whose IDs are specified in the field.

Save the dataset.