Role-Based Data Security Setup in AIV

This guide explains how to configure role-based and user-specific data security in AIV.
With this setup, each user will only see the sales data they are authorized to access.

The examples below use demo users, but you can customize the usernames and roles according to your own requirements.

---

📌 Example Scenario

We have four users, each with different data access levels:

User	Access Level Description
Demo access	Works like an admin. Can view and edit all sales data across all countries.
USA	Sees only USA data.
Germany	Sees only Germany data.
FranceSpain	Sees France and Spain data only.

⚡ Note: These are demo examples. You can create your own users and apply similar rules for different countries, regions, or departments.

---

🛠 Step 1: Create Users

To create users, follow the official guide:
👉 How to Create a User

For this example, create the following users:

• Demo access
• USA
• Germany
• FranceSpain

📸 Screenshot Placeholder: User Creation Page

---

🛠 Step 2: Create a Role

Next, create a role named Security.
👉 How to Create a Role

📸 Screenshot Placeholder: Role Creation Page

---

🛠 Step 3: Assign Role to Users

Now assign the Security role to specific users:

• USA
• Germany

👉 How to Assign a Role

Role Assignments:

• USA → Security role
• Germany → Security role
• Demo access → No restriction (sees all data)
• FranceSpain → Custom query logic (France + Spain data only)

📸 Screenshot Placeholder: Assigning Role to Users

---

🛠 Step 4: Configure Dataset with Security Logic

We’ll apply data security at the dataset level.

1. Open Hamburger Menu → Master Data → Create Dataset.
2. Select your data source (e.g., training data source connected to a MySQL database).
3. In the query editor, add security conditions.

📸 Screenshot Placeholder: Dataset Creation Screen

Example Query

WHERE 
    {{user}} = 'Demo access'
    OR (
        {{user}} = 'FranceSpain' 
        AND customers.country IN ('France', 'Spain')
    )
    OR customers.country = {{user}}

👉 Alternative (only Demo, USA, Germany):

WHERE 
    {{user}} = 'Demo access'
    OR customers.country = {{user}}

📸 Screenshot Placeholder: Query Editor with Security Conditions

---

🛠 Step 5: Set Up Parameters

1. After writing the query, open the Parameters section.
2. For the parameter {{user}}, set the Default Value as:

getOwner()

This ensures AIV dynamically uses the logged-in username.
3. Preview your dataset output to confirm filtering is correct.

📸 Screenshot Placeholder: Parameter Setup Screen

---

🛠 Step 6: Create Visualization (Viz File)

1. Go to Dashboard Menu → Create Viz.
2. Add any chart you need.

👉 Example: A Table Chart with the dataset Sales Security Insights.

• Select the required columns.
• Drag and drop them into the table widget.
• Save your Viz file.

📸 Screenshot Placeholder: Viz Creation (Table Chart)

---

🛠 Step 7: Add Viz to Dashboard

1. Open the Dashboard Grid Menu.
2. Select your saved Viz file.
3. Right-click → Share.

📸 Screenshot Placeholder: Adding Viz to Dashboard

---

🛠 Step 8: Share with Roles and Users

1. In the Share Options, you will see all users and roles.
2. Select the Security role (or your custom role).
   • Example: Security role includes USA and Germany users.
3. Set Visibility = Public.
4. Click Share.

📸 Screenshot Placeholder: Share Settings Window

---

🛠 Step 9: Test User Logins

• Demo access → Sees all countries.
• USA → Sees only USA data.
• Germany → Sees only Germany data.
• FranceSpain → Sees only France and Spain data.

📸 Screenshot Placeholder: Testing Login with Different Users

---

📂 Dataset Example

Dataset Name: Sales Security Insights

• Contains sales data with a country column.
• Data visibility is filtered dynamically based on the logged-in user.

📸 Screenshot Placeholder: Example Dataset Output

---

✅ Summary

By following these steps, you can:

• 👤 Create multiple users.
• 🔑 Assign roles for security.
• ⚙️ Configure datasets with parameters and queries.
• 🔒 Ensure each user only sees authorized data.

This provides a role-based, user-specific data security setup in AIV.