Assign row-level security to manage IUIE user access

• Overview
• Determine existing user security
• Add or revoke access

Overview

In the IUIE, row-level security is a complement to restricted row-level (RRL) Collections. You can assign row-level values to users directly instead of placing them in an RRL group. You can then assign values for row-level columns for each application area secured at the row level. From a publishing perspective, row-level security groups are still assigned to row-level report objects.

Determine existing user security

To determine existing row-level security by user:

1. In the IUIE, click the Manage Access tab, and then click Collections.
2. Enter the user's IU username, and then click Filter.
   Note:

   You can optionally search for the user by name, email address, department, and/or campus. If there are multiple results for your search, click the radio button next to the name you want.
3. Click Row Security for: USERNAME, where USERNAME is the username of the user for which you have filtered the view.
4. Click the Collection folder beneath Row Security for: USERNAME (for instance, SIS Student Records) to view the row-level security for the current user in the selected Collection.

   The row-level security will be displayed. A "%" (percent sign) indicates no restriction, while a value indicates the user is restricted to the displayed value. Assign row-level security by application area.

Add or revoke access

To add or revoke user access:

1. Click the edit icon (pencil and paper) next to the object for which you want to edit security. Security options will appear to the right of the object.
2. To add user access to the object, from the drop-down list, select either N (no FERPA access), % (percent sign; no restriction), or a value. Click Add. The message "[ grant request pending by USERNAME ]" will display.
3. To revoke user access to the object, click [ REVOKE ]. The message "[ revoke request pending by USERNAME ]" will display.
4. To cancel a request to either grant or revoke access, next to the request pending message, click CANCEL REQUEST.