Row level security and ad groups

[jjmccoydk]

Hey VA experts.

I have an issue, that i would like some help to.

senario.

this is my table i VA.

name	id	value	ad_group
John Mortensen	5	10	1245,10
Heidi Jensen	6	30	145,10
Anders And	7	4	1245,275,10
Donald map	8	20	1245,145,275,10
steve holding	9	13	145,10
christie brown	10	12	275,10
john jensen	11	10	145,10
Ronald mccoy	12	6	1245,275,10
John Tweet	13	5	1245,10

I have to have row level seccurity couse GDPR. One ad group is fine but serverel AD groups i my table - i can not use in sub:xxxx,

We are a large organization with + 500 ad group, so it is import to use ad group instead of userid.

any suggestions og link til document how can help me

John Mortensen

[FredrikE]

Hi!

One way to do this could be to create a RLS-statement for each group.

Lets take group 10 as an example.

For this group you add a RLS-statment like:

ad_group contains '10'

This is a bit unsafe because '2010' and '110' will also be selected.

If you make sure that all values have a delimiter you could use ad_group contains ',10' for example.

You can create all groups and RLS-statments by using a script so it will become fully dynamic 🙂

Here is one way: https://documentation.sas.com/?docsetId=bisecag&docsetTarget=n1sjpmdvbsgp7bn1vpx0hsvsizcz.htm&docset...

//Fredrik