This presentation demonstrate how Incorta support the data security requirements. It describes how to define the session variable and how to define the security filters.

2. Implementing Data
Security in Incorta
Dylan Wan
Solution Architect at Incorta

3. Supported Scenarios
• Share Dashboards, Reports, Schemas
• defined once and shared among users
• from different organizations
• under different hierarchy levels
• with different roles
• Each user should only see their slice of the data
• Administrators can view the data for investigating and support user’s
issues
• Division managers can view the performance of their own divisions
• Managers can view the headcounts of their own organization

4. Data Security Process
Incorta Data Store Displayed Data
SecurityFilter
Session
Variable
External
Database
1. Login
2. View
11
1
2
3

5. Session Variables
• Built-in Variable
• $user
• Internal Variables
• Use QueryDistinct function
• External Variables
• Write SQL statement
• Run against a SQL data source

6. Session Variable
External Variable Internal Variable
• Real Time
• Extra load on the source
DB; depending on the #
of current users
• If the source DB is
unavailable, Incorta is not
available
• Depend on Incorta
schema refresh schedule
• As fresh as last refresh
• Incorta is accessible even
though the source DB is
not available

7. Security Filter
• Simple Filter using a session variable
• Formula based Filter

8. Security Filter
Simple Filter Formula Filter
• Quick
• Limited Operators
• Need to write formula
expressions
• Support more advanced
logic, such as OR
condition
• InList is optimized to
support up to a thousand
of elements
 Use Formula if the list could
be large

9. Use Dashboard or Insight Filter
• You can also enter filter criteria using session variables when
you define a dashboard Applied Filter or an Insight Filter.
• This approach is applicable if the users do not have the
Analyzer role and can only view the data via the shared
dashboards.
To enforce the data security for the users with Analyzer role,
use Data Security Filter defined at the Schema level.

10. Use Insight Filter
• Insight 1: Summary of approved budget at the top level
• No need to be secured as they are high level allocations
• Insight 2: Show the budget available to level manager for a
given organization
• Need to be secured as different managers are competing with the
limited resources
• Show both levels as different insights in the same dashboard
Use Insight Level filters if the data are available at different
levels of details with different security requirements

11. Filter Expression
• You can define named filters and saved them as filter
expressions
 Create Filter Expressions if the filter criteria can
be applied to multiple dashboards

12. Filter Options
• Filters defined at the Dashboard level like Applied Filter
• Unlike the Applied Filter which is always applied, Filter Options
are a list of options that users can select from during runtime
• The limited options available limits the data available to a user
• Using the session variables in defining the filters makes the
data returned are different
• Dynamic Filter - Make the Saved Filter Expressions available to
a Dashboard
 Use Filter Options to avoid creating multiple
dashboards that only have different filters

13. Demo