Data Permission Management

This chapter guides you through managing data permissions. If your application has data permission controls, you need to manage data permissions according to this chapter before authorizing application accounts.

Prerequisites

1. You have administrator permissions for the IDaaS enterprise center platform.
2. You have created the application and enabled an authorization model associated with functional permissions/data permissions.

Procedure

Open Model Configuration

Application systems may have different types of data. You can click the Model Configuration operation on data permissions in the application model to define data objects.

Add Data Objects

1. Click the Add button to add a data object.

• Fill-in instructions:
  • Data Object Name: must be unique.
  • Data Object Code: unique, cannot be duplicated or modified.
  • Data Structure: select tree structure when data has parent-child relationships.

2. Reference an existing application object as a data object. Currently, you can reference the application's organization data as data permissions. The referenced organization object does not support editing; attribute definition and data management of the organization object are still operated in the Application Organization function.

Define Data Object Attributes

Different data objects may have different attributes, which can be defined by data object.

Open Data Permission Management Page

Click the Manage operation on data permissions in the application model to open the data permission management page.

Import Data Permissions

You can batch import data permissions via an Excel spreadsheet. Click the data permission import operation to jump to the application-side permission import page. Select the application, download the import template, prepare the data according to the template, and import. Import separately by data object.

Manage Data Permissions Manually

1. Select a data object and click it; the data of that object is displayed on the right.
2. Click the Add button at the top of the right-side data to add data.
3. If it is a tree structure, you can continue to add child node data on the data.

• Fill-in instructions:
  • Name: no duplicates at the same level.
  • Code: unique, cannot be duplicated.
  • Sequence: smaller numbers are displayed first.

Authorize Data Permissions

After data permission management is complete, you can authorize data permissions to application accounts or assign data permissions to application roles according to the authorization management guidance.