Row Level Security Example
Audience
Audience: Administrators Edition: Enterprise
Overview
Row Level Security (RLS) profiles limit which field values a user can access on a row by row basis.
For example, you can restrict employee records from displaying any fields that are not specifically marked as Allowed.
The following article provides step-by-step instructions for configuring a basic RLS profile.
Configuring a Row-Level Security Profile
Log in to OrgChart.
Click on the Mode Switcher icon in the Top Toolbar, and then select the Setup option. The Setup panel is displayed.
Click on the Account Settings tile, and then click on the Security tab in the left side menu.
Click on the Create New Profile button (under the Row Level Security heading). The Security Configuration panel is displayed.
Enter a name for the profile in the Name text box
Optionally, enter a description of the RLS profile into the Description text box.
Select the Allowed Fields option (in the Security Rules column).
Note
Note: When Allowed Fields is selected, only Fields added in the Fields section can be viewed. All other fields are restricted.
When Restricted Fields is selected, the Fields added in the Fields section cannot be viewed. All other fields are allowed.
Some fields cannot be restricted, such as PersonID and SupervisorID, as these fields are integral to structuring of the chart.
Click on the
icon to the right of the Fields heading.Select a Field from the dropdown menu. Selected fields are displayed in the Fields column (as shown in the screenshot below).
Click on Save.
Assign this RLS profile to an Access Group. Reference the Row-Level Security article for instructions on how to assign an RLS profile to an Access Group.
Testing Permissions
Administrators can login as users with different levels of access to test permissions. Reference the Admin User Impersonation article for more information.
The following section tests the RLS profile configured above, which states employee records will display only the following Allowed fields: Department Name, Name, and Title.
Without Row Level Security
With Row Level Security
