MicroStrategy ONE

Manage Security Filters

You can manage security filters at the project or user level.

Data restrictions in security filters must be assigned to users or user groups for them to work. You can do this in the Security Filter Editor, project configuration, or the User/Group Editor. In the Security Filter Editor, the toolbar provides a way to see the assigned users or groups for a security filter. New users and groups can be assigned to the security filter or existing ones can be removed. To assign security to users and user groups, you must have the Assign Security Filters (under Server - Intelligence) privilege.

Manage Security Filters for a Project

The Project Configuration dialog provides a view of all security filters in the project and the assigned users. The dialog can be viewed from two perspectives: a list of all security filters, and the users/groups for each; or the users and groups, along with their directly assigned security filter. Independently, exporting this security filter assignment returns a list of users or groups with a directly assigned security filter, along with their corresponding IDs.

To assign a security filter to a user or group at the project level:

  1. Open the Workstation window with the Navigation pane in smart mode.
  2. In the Navigation pane, click Projects.

  3. Right-click the project you want to manage a security filter for and choose Properties.

  4. In the left pane, click Security Filters.
  5. You can view security filters and how they are assigned to user and user groups from two perspectives: by security filter or by user.

  6. Click New Security Filter in the top right to create a new security filter.
  7. Click Export to export the current security filters and the users and groups associated with them into .csv format.
  8. You can adjust the Security Filter Merge Options at the bottom to control the query behavior when multiple security filters are applied to a specific user. Note that while only one security filter can be directly assigned to a user or group, these users can inherit security filters from parent or ancestor user groups. Users that inherit multiple security filters are merged according to this project-wide setting.

Manage Security Filters for a User

The User Editor also has a section for security filters. It provides an overview of all projects and the user’s directly assigned security filters. The User Editor also lists indirectly inherited security with information about which user group the security filter is inherited from.

  1. Open the Workstation window with the Navigation pane in smart mode.
  2. In the Navigation pane, click User and Groups.

  3. Right-click the user you want to manage a security filter for and choose Properties.

  4. In the left pane, click Security Filters.

    You can view all projects to which the user has access and the security filter assigned to this user for each project.

  5. If a project has a security filter assigned, you can edit or remove it.
  6. If a project does not have a security filter assigned, you can click Add to assign a filter for the user.
  7. Use the search at the top to locate a particular project by name.