Assigning Labels to Roles

The "Security labels" section has a list of existing labels that can be included and customized for each individual role (user). Labels are created and edited in the appropriate section.

To enable a security label for a role:

  1. Select the required role.

  2. Click Off against the security label that needs to be activated.

  3. As a result, the label will be enabled for the current role.

  4. Click image1 "Add Value" under the enabled label (Figure 1).

  5. A list of security label attributes becomes available. The content of the list depends on how the security label in the relevant section has been configured and whether one or more attributes are contained.

  6. If necessary: specify the attribute values in the label.

    • If no value is specified, all entity/reference set records will be available to the steward, regardless of what value the attribute takes.

    • If the value is specified, the steward will have access only to those records at which this attribute takes the specified value. For example, only customers with USA citizenship.

    • If the security label contains more than one attribute, only those records that match all label conditions will be available to the steward. For example, M12-threaded spark plugs and DENSO manufacturer.

  7. If necessary, add another list of security label attributes.

    • The «OR» separator is displayed between the attribute lists.

    • If the security label contains more than one set, the records corresponding to the conditions of each set will be available to the steward. For example, 4 sets with Philips, Polaris, Panasonic, and Bosch values allow the steward to work with records of specified producers.

  8. After completing all the settings, click Save it the top right corner of the screen.

Enabling security label

Figure 1. Enabling security label

Notes:

  • Data access restrictions are extended by the account and the role labels.

  • Single attribute restrictions extend access to records with specified attribute values. For example, if the label1 (assigned to the role) contains the material: steel; the label2 (assigned to the role) contains the material: wood and the label3 (assigned to the account) contains the material: plastic, the user will have access to records with all specified material types.

  • Restrictions on the various entity/reference set attribute complement the record access conditions. For example, records with the attribute "Material: Steel" will be found 8620, and records with the attributes "Material: Steel" and "Steel grade: 60C2A" only 206.

  • If the account gets rights from the security label governing different entity/reference set, the list of available entity/reference set attributes increases.