FineBI Version
Functional Change
6.0
/
For an organization with a hierarchical structure, each level may want to be assigned different permissions.
For example, given the hierarchical relationship between the headquarters, branches, and sub-branches, you need to assign different permissions to users based on their respective organizations.
The expected effect is that the headquarters can view all data, a branch can view the data of its own branch as well as all data of its sub-branches, and a sub-branch can only view its own data.
Step:
1. Build self-looping column.
2. Import users in Server Dataset (or synchronizing user dataset).
3. Match Field of the Login User Name.
4. Assign permissions based on organizations.
5. Assign permissions based on users.
Note: You cannot set self-looping column for real-time data, but you can assign permissions with self-looping SQL.
Number
Procedure
Explanation
1
Building self-looping column
The original organization data added in FineBI has no hierarchical structure. Building self-looping column can form hierarchical organizational structure, which facilitates the subsequent assignment of permissions based on hierarchy.
2
Importing users
Importing data through server dataset or synchronizing the user dataset saved in the database.
3
Matching Field of the Login User Name
Matching the user's login account with the account in the user login permission table saved in the system. This step is to match the user's organization based on the login account.
4
Assigning permissions based on organizations
Different permissions are assigned based on the organization's hierarchy, so that the permission can be matched to the corresponding organization when the user logs in.
5
Assigning permissions based on users
You can assign users the permission matching their accounts, so that they can only view their own relevant data after logging in.
Click to download the sample data and unzip it:
Sample Data.zip
Organization table includes the bank's headquarters, branches, and sub-branches, as well as their corresponding organization number and superior organization number.
User permission table includes the bank staff's account, password, affiliated organization number, department and position.
Business transaction table includes the transaction data that the corresponding staff can view.
The admin logs into FineBI, clicks Public Data > New Folder to add the folder Sample Data.
Click Add Dataset , select Excel Dataset, and upload the three prepared data tables in order.
Note: When uploading data, you need to make sure fields such as Organization, Superior organization, and Organization number are text. Otherwise, you cannot select Organization as Hierarchical result field when setting Self-looping Column.
1. Click Upload data, select Organization table, and modify the format of Organization and Superior Organization fields to text.
2. Click Upload data, select Business transaction table, and modify the format of District number, Organization number and Staff number fields to text.
3. Click Upload data, select User permission table, and modify the format of Account and Organization fields to text.
Click Public Data, select Sample Data > Organization table, click Associated View to add associations for the three tables, and click Update Excel.
Note:
1. When uploading data, you need to make sure fields such as Organization, Superior organization, and Organization number are text. Otherwise, you cannot select Organization as Hierarchical result field when setting Self-looping Column.
2. When the folder is updated, the associations between the Excel datasets will not be updated. Therefore, you can use Global Update.
Click Public Data, select Sample Data > Organization Table, and click Edit.
Tick Select All, click , and select self-looping column to configure the hierarchical relationship of Organization table.
Select Layers according to two columns of data as Self-looping Column Type, Organization and Organization name as Hierarchical result field, Organization as Hierarchical ID column, and Superior organization as Parent ID column.
Click build relationship and Preview to see the hierarchy and data below.
Click Save in the upper right corner to save the self-looping column operation.
The admin logs into FineBI, clicks My Analysis > New subject to create a subject named Business Transaction, and clicks Edit.
Click , and select Public Data > Sample Data.
Click Batch Choose, select Business transaction table and Organization table, and click OK.
Select Business transaction table, click Left and right merge, select Organization table, and tick Select All.
Set left merge as Mode, and select Organization number under current table and Organization under Organization table as Merge basis.
Click Exit and preview > Save And Update.
Click Add component to create a component named Business transaction daily details, click , and select Business transaction table. Then design the component as below:
Click Add dashboard to create a dashboard named Business transaction dashboard with the component above.
Click Manage > Directory, and mount Business transaction dashboard to the directory list.
You can add users in three ways: manually adding users, importing users, and synchronizing users.
Take importing users as an example. You need to ensure that the imported username is consistent with the username in the prepared data table.
The admin logs into FineBI, clicks Manage > Data Connection > Server Dataset > File Dataset.
Set User table as Dataset Name, select Excel as File Type.
For File Source, click Local File, select User permission table, and click Save.
The created server dataset.
The admin logs into FineBI, goes to Manage > User > All Users, and clicks Import User.
Select the server dataset User table, set the corresponding information such as Account, Password, Dept. and Position, and click OK.
In the Platform User interface, if there is No limit on user number of PC User and its subcategories, then there is no need to follow the procedures in this section.
In the Platform User interface, if the number of users in PC User and in its subcategories is limited, you need to follow the procedures in this section, otherwise you cannot view the dashboard.
The admin logs into FineBI, clicks Manage > User > Platform User, and adds the imported users to BI User (BI View User or BI design user).
Note: This section introduces how to assign permissions to the permission carrier Dept... Admins can also assign permissions to Role or users from User List.. If the personnel at the headquarters do not want their permissions to be controlled, you can set a role for the headquarters to control their permissions independently.
The admin logs into FineBI, goes to Manage > Permission > General permission configuration, and selects Human resources and Technical support.
Click Directory, and assign the View permission of the Business transaction dashboard directory to the two departments.
The admin logs into FineBI, goes to Manage > Permission > General permission configuration, and selects the permission carrier All Departments.
Click Data Authorization, click Please Select in Field of the login user name (Spider), click Sample Data > User permission table, and select Account, which is the login username of the corresponding user.
The admin logs into FineBI, goes to Manage > Permission > General permission configuration, and select Human resources.
Click Data Authorization, assign Component Data permissions of Business transaction table and Organization table used in Business transaction dashboard to Human resources.
Then everyone in human resources department can view the data. If you hope that the headquarters views all data, a branch views the data of its own and its sub-branches, a sub-branch only views its own data, you need to configure Data Authorization according to the organization.
Click beside Organization table to add row permission conditions.
Click Add condition(AND), select the Organization field in Organization table, and select In(Login User Info) and Organization in User permission table.
Click OK to save the settings.
The admin logs into FineBI, goes to Manage > Permission > General permission configuration, and select Technical Support.
Click Data Authorization to assign Component Data permissions of Business transaction table and Organization table used in Business transaction dashboard to Technical Support.
Then everyone in technical support department can view all the data. If you want the staff to view their own data only, you need to configure Data Authorization based on the account.
Click beside Business transaction table to add row permission conditions.
Click Add condition(AND), select the Staff field in Business transaction table, and select In(Login User Info) and Account in User permission table.
Log into the decision-making platform with the account of a branch manager, sub-branch manager, and staff respectively to view the Business transaction dashboard.
1. Log in with the branch manager account (account 99, password 123), you will find that all district number are 22 (Nanchang branch). You can view the data of the branch and its sub-branches in the dashboard.
2. Log in with the sub-branch account (account 101, password 123), you can view the data of Organization 22701 (Branch A).
3. Log in with the staff account (account 6159, password 123), you can view the data of the staff only.
滑鼠選中內容，快速回饋問題
滑鼠選中存在疑惑的內容，即可快速回饋問題，我們將會跟進處理。
不再提示
10s後關閉
Submitted successfully
Network busy