Page Comparison

1. In the navigation sidebar, expand Admin > RBAC and click Visibility Restriction Policies.
2. On the Find Visibility Page that appears, click the Actions tab and then click Create Data Visibility Filter.
   
   Image Added
   
   
   This opens the Filter Details form for the Data Visibility Filter.
   

Image Removed

1. 
   Image Added
   
   
2. Click the Assign Policy To

1. and select from the following Actor

1. types to receive the policy.

1.  
   • Person — Applies the policy to a specific person.
   • Group

1. • — Applies the policy

1. • to a specific group. Each person who is a member of the group

1. • receives the policy.
   • Business Role and Location

1. • — Applies the policy

1. • to a specific Business Role and Location. Each person who belongs to the Business Role and Location

1. • receives the policy.
   • Management Role

1. • — Applies the policy

1. • to a specific Management Role. Each person who is a member of the role

1. • receives the policy.
   • Management Role Definition

1. • — Applies the policy

1. • to a specific Management Role Definition. Each Management Role that is a child of the definition

1. • receives the policy.
   • Query-Based Collection (SetGroup)

1. • — Applies the policy

1. • to a specific Business Role and Location. Each person who is a member of the collection

1. • receives the policy.
     
     
2. In the Assignee field that appears, do one of the following depending on the Actor type you selected.
   1. Type the name of the specific actor to whom you are assigning the policy and then click the tile for that actor to select it. For example,

1. 1. to assign the policy to a Query-Based Collection (SetGroup),

1. 1. type the name of the SetGroup in the field and

1. 1. click the tile for that SetGroup.
   2. If you selected Business Role and Location as the Actor type, click the Select a Role and Location link and in the Role and Location Selector that appears, search for and select a Business Role and Location and then

1. 1. click Select to close the selector.
      

Image Removed

1. 1. 
      Image Added
      
      
2. Type a name and description for the policy in the Name and Description fields

1. .
2. In the Priority field, enter a numeric value to set the priority

1. to determine which policy takes precedence

1. when users

1. have more than one policy. The lower the number the higher the

1. priority.
2. Leave the value of the Mode field set as Default.
3. Leave the Pre-Query field blank.
4. In the Select Clause field, type the SQL statement for the filter that returns only those objects allowed by the filter.
   For example,

1. to create a filter that only allows Contractors to see other Contractors,

1. write a query similar to the following example (

1. if the Title field is used in your environment).

   
   

   Code Block
   language sql
   SELECT PersonID FROM dbo.Person (NOLOCK) WHERE Title = 'Contractor'

   
   At this point, the Filter Details form

1. looks like the following image (with variations for the selected options).

1. The image depicts a Data Filter policy that

1. allows people in the Contractors Query-Based Collection to see only people in EmpowerID who have a Title attribute of Contractor.
   

Image Removed

1. 
   Image Added
   
   

2. Click Save.

To test the Data Filter Policy

1. Log out of the EmpowerID Web application and log back in as a user with the Data Filter policy.
2. From the Home page of the Web application, search for any resource object restricted by the policy. For example, if you created a Data Filter policy that restricts

1. which people

Concepts:

• Understanding Visibility Policies

Tasks:

1. can be seen, search for people.
   

1. The search returns only objects allowed by the filter. In the image below, the logged-in user is assigned a Data Filter that only allows him to see people who have a Title attribute of Contractor.
   
   Image Added