Hi,
I need a solution on below query in Section Access and Section Application
How to restrict users at Data reduction level in Section Access who are part of Active Directory Group (AD\xyz-DEV) which AD group is added in section access script
Ex :
Section Access;
Privileges:
LOAD * INLINE [
ACCESS, USERID, %AUTH_ID, ORG_LVL_Granted, ACCESS FULL COST, OBJECT_GROUP, GROUP
ADMIN, INTERNAL\SA_SCHEDULER, *, *, *, *, *
USER, *, *, *, *, *, 'CN=AD\xyz-DEV,OU=Groups,OU=abc,DC=AD,DC=xyzabc,DC=com'
];
Concatenate
Privileges:
LOAD
'USER' as ACCESS,
upper(USERID) as USERID,
upper("ORG_LVL") & '|' & upper("REGION") & '|' & UPPER(Subfield (DATASOURCEID,'-')) as %AUTH_ID,
ORG_LVL_Granted,
IF (ORG_LVL='<ANY>' and REGION='<ANY>',1,0) as [ACCESS FULL COST],
if (Len([OBJECT_GROUP]) = 0,'GROUP0', OBJECT_GROUP) as OBJECT_GROUP,
'*' as GROUP,
OMIT_GROUP;
Section Application;
Example :
%AUTH_ID = 12345|Any|Any
Current Scenario :
Where %AUTH_ID is a link key and concatenated with above Privileges table currently which is combination is org_lvl, Region and Data Source ID level
The link key (%AUTH_ID) is connected with fact table in the data model for data reduction
Now, we don't want Users table and we can use only section access with active directory
New Scenario :
How to do data reduction in section access with active directory as per existing scenario but make sure don't use any other table (Ex: users) which is concatenated with inline table (where active directory is implemented)?
Regards,
Vara
