Hello Folks, Need a support to understand the following behaviour. Use Case 1: 1. Created a user group 2. Gave it a view permission for a workspace 3. Applied a data filter to it as per <https://www.gooddata.com/docs/cloud/workspaces/user-data-filters/> 4. Assigned a user to the user group 5. After log in getting following error <This workspace is empty> 6. The tooltip says don't have permission to connect to data. I have also added the DB as permission to the user group still the same Use Case 2: 1. For the same above group changed the permission from view to manage 2. After log in could see the dashboards but the filters are not applied Can someone please comment how to proceed. Thanks!

Hello Vinod, For scenario 1, unfortunately I am unable to reproduce it. Could you please try removing the user data filter from a test user to rule out any issues with the data filter itself? If you are able to see the data, then I would look into how the filter itself was defined, but if you need assistance with this, please feel free to send me a DM with the filter details. For scenario 2, note that if a user has the

MANAGE

permission in the

organization

the user also has

MANAGE

permission in all

dataSources

and

workspace

objects nested under the organization, even if the user does not have the

MANAGE

permission explicitly defined in each nested object.

@Moises Morales For Scenario 1 even removing the data filters its the same. Scenario 2 The manage permission is set on

workspace

for the user group I created in this case only the users belonging to group are able to see dashboards but data filters not applied.

@Vinod sorry about the radio silence, may I know how you added the users to your organization? It's my understanding that you are still using our OIDC, therefore, it will be necessary to add the users from our side for now. Regarding scenario 2, I would like to take a closer look here, could you please send me via DM your environment details?

Hi @Vinod, in scenario 1 when the workspace permissions is

VIEW

the reason might be that the dashboards are not shared with the user group or are not set as shared with All users. So the user is not allowed to see any dashboards and therefore the workspace seems to be empty for the user. Try to share any of the dashboard with the user group or all users via “Share” button on dashboard and try if that helps.

Hi @Pavel Svec Yes I tried this and this is resolved for now. However data filters for this user group is not working for me. I created filters with following definition { "data": { "type": "userDataFilter", "id": "abc", "attributes": { "maql": "{label/wdforgid} = \"abc\"", "title": "Org to access abc Only" }, "relationships": { "userGroup": { "data": { "id": "8b170a49-869d-4760-8360-729bd6b20ba8", "type": "userGroup" } } } } } Followed the steps from https://www.gooddata.com/docs/cloud/workspaces/user-data-filters/ Could you pls let me know If I missed anything

@Vinod The definition you shared is all you need to define the user data filter for the referred User group. The filter is not applied even if you go to Analyze tba and try to list

label/wdforgid

only for example? Under which user are you testing the filter, some user who is member of

8b170a49-869d-4760-8360-729bd6b20ba8

user group right? Also bear in mind please that the filter works along the direction of the arrows in the LDM only (not against the direction).

@Pavel Svec Yes I tried in Analyze the filtering is not applied. You are right I'm testing for user under group ``8b170a49-869d-4760-8360-729bd6b20ba8`` Not sure when you say

Also bear in mind please that the filter works along the direction of the arrows in the LDM only (not against the direction).

What it means is that in the sample LDM below, user data filter e.g. on Product Category will work to automatically filter also data of Order lines dataset (relationship is along the direction of the arrow). But if you set e.g. filter on Order status, records of Products dataset won’t be filtered.

@Pavel Svec Understood thanks in my case is very straight forward every table has this column and its only single datatable viz. I have tried data filters on workspace level there it works. However the requirement for me is to apply it on user group which doesn't work I tried to follow the steps as above. Would appreciate any help for the same

Could you probably share the LDM screenshot with me via DM and a screenshot of the insight where the filter does not work as expected? Hopefully I will be able to spot the reason

sure sending you privately