Row Level Security on base measures
Kyvos now supports applying Row-Level Security (RLS) at the base measures (Low Volume Suppression-LVS). This feature enables you to define rules that automatically suppress or omit data for defined interval, thereby reducing privacy risks and preventing misleading insights. By enforcing measure-level RLS, Kyvos ensures data protection, preserves analytical accuracy, and supports informed decision-making.
Why LVS is important:
Protects sensitive information: LVS prevents the potential identification of individuals or the exposure of personally identifiable information (PII) when data volumes are too small to display safely.
Ensures reliable insights: Very small counts can lead to skewed interpretations or unreliable trends. Suppressing them helps maintain analytical accuracy and prevents decision-making based on statistically insignificant data.
Points to know
Users with data-security privileges can define Row-Level Security (RLS) on base measures in the semantic model. Only records that meet the defined rules will be displayed.
Subtotals and grand totals are always calculated from the lowest level of the hierarchy present in the view or applied filters.
Kyvos will automatically apply suppression whenever a measure from the fact table—on which a suppression rule is defined—is included in the view.
Suppression is used at the lowest hierarchy level. If all child values under a parent are suppressed, the parent will also be suppressed.
For every report, Kyvos evaluates measure values in combination with filters and RLS rules to determine what should be displayed or suppressed.
Filter listing must have all valid dimension values. Even if a dimension is added to the view, it will display all values unless a measure from the fact table (that has suppression enabled) is included.
In case of calculated members/measures, the Low Volume Suppression will be applied at the base measures used in the calculation.
To set an LVS rule on base measures, perform the following steps.
From the Toolbox, click Semantic Models.
Click the Actions menu (...) in the work area then click Data Security.
In the Groups/ Users section, select users or groups that should have access to this semantic model.
Click to select one or more existing rules.
Click the plus sign in the Rules column to add a rule.
Add a rule name and description.
For Rules, click Allow All Columns, Allow All Rows, or click the Plus sign next to Rules to add a custom rule.
On the Add Rule dialog, provide Rule Name and Description.
From the Row Level area, click the field link and select the measure on which you want to apply the RLS.
Select the conditions from the list.
Click the value link, and the dialog box is displayed where you can search or select the measures on which you can apply the RLS. The available choices vary depending on the data you are using.
Click Add. The RLS rule on measures is applied to the selected measures. You can also apply RLS on the Key value when the Hierarchy/attribute contains description (display field).
Click Row Level, and then select the click the field link, and then select the measure on which you want to apply the RLS security. The RLS on Key field is applied to the values.
Low Volume Suppression on Worksheet
Without Low Volume Suppression (LVS) | With Low Volume Suppression (LVS) |
|---|---|
|
|
Read also: