Within the RBAC framework, Data Access Control determines the specific data sets visible to users.
By applying filters to a group, you ensure its members access only filtered data. Please note that users can be members of more than one group. This component ensures users engage only with the data relevant to their roles and responsibilities, avoiding unnecessary data and information visibility.
In Finout, you have the flexibility to create customized user groups, tailoring data access to fit specific requirements. For example, creating a group solely for the R&D team, ensuring access to only those datasets that are related to their work.
Important: Data Access is configured to be 'deactivated' by default. To enable Data access for your account, please contact our support team at [email protected].
Enabling Data Access Control
Data Access Control must be enabled in the organization within Finout in order to start creating user groups based on specific data filters. This can be done only by a user with an Admin role who has permission to manage groups.
Log in to Finout as an Admin user.
Navigate to Settings.
Select the Groups tab.
Select or deselect Allow data access in my organization.
Click Continue. Once enabled, you can start creating groups and applying filters to them. See How to Edit Data Access.
Groups
In Finout, groups facilitate efficient data access setup for users. Users can either be manually added to a group or linked via SAML mapping when Single Sign-On (SSO) is enabled. The groups can reflect your organization's structure and determine what data every department or team should be exposed to.
Upon accessing the Group section, the Admin Group is visible. This default group comprises all admin users, providing them with unrestricted app access. While users can be added or removed from this group, at least one member must always remain for full data visibility.
Creating a New Group
When creating a new group, you will be requested to define the group’s role and select the group members, either by picking individual members, or via SAML group(s) integration.
Log in to Finout as an Admin user.
Navigate to Settings.
Select the Groups tab.
Choose Create Group.
Input a suitable Group Name.
(Optional) Define the Group Role, e.g., Admin.
Each user in a group inherits the role assigned to that group. A user's permissions are then a union of both their individual role and the group's role they are a part of.
(Optional) Provide a brief Group Description.
Add individual Group Members or input a group using the SAML Group mapping. Repeat this process for each user or SAML group you want to include in the group.
Once done, click Create to finalize the group setup.
Editing Group Data Access
You can tailor the data your group can see by implementing filters.
Log in to Finout as an Admin user.
Navigate to Settings.
Select the Groups tab.
Click on (⋮) next to the desired group and select Edit Group.
In the Data Access tab, activate the Data access status. This action will enable data access for this group.
Customize the group data by choosing the cost filter options for the group:
Select the desired Cost center, for example, AWS.
Select the relevant key, for example, Regions.
Select the relevant operator, for example, Contains.
Specify the necessary Values.
(Optional) Click Add new filter if you wish to add additional filter criteria.
Click Save to apply the changes.
Deleting a Group
Log in to Finout as an Admin user.
Navigate to Settings.
Select the Groups tab.
Click on (⋮) option and choose Delete Group.
Click Continue to delete the group.
Editing Group Users and SAML Groups
Finout provides flexibility in managing group members. Whether you're creating a new group or updating an existing one, you can easily add or remove users and SAML groups.
Adding or Removing Users From a Group
Log in to Finout as an Admin user.
Navigate to Settings.
Select the Groups tab.
Click on (⋮) and select Edit Group.
Navigate to the Users and SAML mapping tab.
To add users to the group, select the new users from the drop-down under Select group member.
To remove a member from this group, click on (⋮) and select Remove user.
Adding or Removing SAML Mapping
In the Users and SAML mapping tab, use the free text option to input the desired SAML mapping and click + ADD.
The added SAML group will be displayed in a table under the SAML group tab.
Note: A numeric indication next to the group name indicates the number of groups added.
To add more SAML groups, simply repeat step 5 for each group.
To remove a SAMK mapping group, click the three dots and select Remove SAML group.
Editing Group Settings
Log in to Finout as an Admin user.
Navigate to Settings.
Select the Groups tab.
Click on (⋮) and select Edit Group.
Select the Group settings tab.
In the Group settings, you have the option to edit the group name, role, and description.
Still need help? Please feel free to reach out to our team at [email protected].