Authorization Based on User Tags

User tag-based authorization is ideal for organizations with many members. This approach lets you authorize all users with the same tag simultaneously, avoiding the need to grant permissions to individual users or groups. This simplifies the authorization process and improves efficiency. This section describes how to perform authorization based on user tags.

Step 1: Add a User or User Group Tag

Log in to the DataArts Insight console.
Click in the upper left corner of the management console to select a region. Then, select an enterprise project in the upper right corner.
On the top menu, click System Settings. In the navigation pane of the displayed page, choose Organization Management > Tag Management. On the displayed User Tags tab, click Add Tag. In the dialog box that appears, enter the tag name, default tag value type, and description and click Confirm.
Click Edit to go access the tag details page and set tag values for users. For example, add user tag tag_product_type and assign a tag value to user1.
Figure 1 Adding a tag

Step 2: Use the Tag for Authorization

In the navigation pane on the left, choose Data Management > Datasets.
On the displayed page, locate the desired dataset, click More in the Operation column, and select Row Permissions. In the slide-out panel, enable the Row Permissions toggle and select Authorization Based on User Tags.
Set Condition Relationship. The options are:
- AND: If multiple user/user group tag authorization rules are configured, user1 can view the data that falls under the intersection of country=A, industry=1, and segment=s1.
- OR: If multiple user/user group tag authorization rules are configured, user1 can view the data that falls under the union set of country=A, industry=1, and segment=s1.
Click Add and select Controlled Field and Tag Table Field, as shown in Figure 2.
After editing the rules, click OK to save them.
Figure 2 Example of user tag authorization rules