Data Access

Overview

Within an organization, data that requires restricted access, such as personal or sensitive information, can be protected by setting policies that prevent unauthorized users from viewing it. By selecting a connection in the Data Access menu, administrators can create policies and manage rules that restrict access to specific tables or columns.

Creating a Table/Column Access Restriction Policy

To register a new access restriction policy for tables or columns, follow these steps:

1. Navigate to the Administrator > Databases > Policies > Data Access menu.

2. Click the Create Policy button in the upper right corner.

3. Enter the following information:

   • Policy Name: A unique name to identify the policy on the screen.

   • Target Connection: Select the connection to which the policy will apply. Each policy can be linked to only one connection.

4. Click the Save button to save the policy.

Once saved, the policy will appear in the Data Access policy list.

Registering Rules to the Access Restriction Policy

After creating a policy, the next step is to register the specific data paths (tables or columns) that the policy will apply to.

1. Click on the policy you just created to open the details and rule registration screen from the Data Access policy list.

2. In the details screen, click the Add Rule List button on the right side.

3. Select the data paths to which the policy will apply:

   1. Database Name: A required value for rule registration.

   2. Table Name: A required value for rule registration. If only the table is selected, access to the entire table will be restricted.

   3. Column Name: If access needs to be restricted at the column level, select the specific column.

4. You can also specify exceptions for certain users or groups who need access to the data:

   • Allowed Users: Select the users or groups that will be exempt from the access restriction.

5. Click Ok to save the rule.

Once saved, you can verify the rule's registration under the Rule List tab. When users attempt to access the data, the table will be completely inaccessible if the policy is applied at the table level, or restricted columns will display {RESTRICTED} if applied at the column level.

When selecting the Database Name, I am encountering the following error:
“[ENGINE] [30101] Please Check the user credential or IP ACL settings. Access denied for user ‘username’@‘host’ (using password: YES)”.

A. This error typically occurs if the database account information has not been set or has been configured incorrectly. To resolve this issue, navigate to the Administrator > Databases > DB Connections, click on the relevant connection, enter the correct Database Username / Password information, save the changes, and then try again.