Role-based Security

Overview

Role-based security can be configured within xpna to segment access to data based on group membership. This feature allows the creation of security groups with specific rules, such as hierarchy member selection, attribute member selection, and direct filter expression.

Note:

It is recommended that role-based security is enabled in a workspace when there are users that should not see all of the data contained in the workspace

Enable Role-based Security

1. Open workspace permissions from Settings > Users & Security in xpna Web, or Workspace Management > Permissions in the xpna Excel add-in.
2. Select the Security tab.
3. If the Role-based Security add-on is unavailable, a subscription administrator can select Add to Subscription when the plan allows add-on purchases. Otherwise, contact the subscription administrator or xpna support to arrange access.
4. Once the add-on is available, select Enable role-based security and accept the confirmation.

Note:

Enabling role-based security cannot be undone. Enabled workspace administrators retain full data access. Other enabled users lose data access until they are assigned to at least one security group.

Security Groups

Groups are managed on the Security tab. Groups can be created with a name, description and members from the current workspace. Once created, security rules can be added using the action button on the group's row.

The Assign Security dialog is opened, where security rules can be defined.

Finding a user's groups

• User lookup can be used to select a workspace user without administrator access. The list is filtered to groups containing that user.
• Workspace administrators are excluded from User lookup, because they have full data access while enabled.
• The search field can be used to narrow the list by group name or description. Both filters apply when a user and search text are selected.
• Clearing User lookup removes the user filter. Clearing the search field removes the text filter.

On the Users tab, select a non-administrator's Security groups count or No data access badge to open this filtered view. The count describes membership; the group's security rules determine which data is available.

User lookup, search, and add controls sit above the table on the right. The table shows all matching groups without pagination. Scroll the page content to reach groups further down the list.

The workspace permissions tour covers user access, group lookup, and security rules using sample data. It can show group membership and rules even when the workspace has no groups or role-based security is disabled. Changes are disabled during the preview, and the workspace view is restored when the tour ends. Use the tour restart button beside the tabs to run it again.