MicroStrategy ONE

Use Attribute Mapping to Restrict the Data Users Can View

You may want to integrate LDAP attributes into your MicroStrategy security model. For example, you want users to only see sales data about their country. You import the LDAP attribute countryName, create a security filter based on that LDAP attribute, and then you assign that security filter to all LDAP users. Now, when a user from Brazil views a report that breaks down sales revenue by country, she only sees the sales data for Brazil.

LDAP attributes are imported into MicroStrategy as system prompts. A system prompt is a special type of prompt that is answered automatically by the Intelligence Server. The LDAP attribute system prompts are answered with the related LDAP attribute value for the user who executes the object containing the system prompt. You import LDAP attributes into MicroStrategy from the Intelligence Server Configuration Editor.

Once you have created system prompts based on your LDAP attributes, you can use those system prompts in security filters to restrict the data that your users can see based on their LDAP attributes. For information about using system prompts in security filters, including instructions, see Restricting Access to Data: Security Filters.

The ability to view or edit certain settings is determined by a user's privileges. All necessary privileges are included in the Administrator role by default. You must belong to the System Administrators group to use this feature.

  1. In the Navigation pane, click Environments.
  2. Right-click the connected environment and choose Directory Service > Configure Directory Service.
  3. Click the Attribute Mapping tab.
  4. Click Add Attribute Mapping.
  5. Under Attribute Type, use the drop-down to select the attribute type: character, number, or date. Char is selected by default.
  6. The Name field is auto populated with the name of the system prompt on the Intelligence Server.
  7. In the LDAP Attribute field, enter the name of the LDAP attribute you want to import to the system prompts on the Intelligence Server.
  8. Click Save.