Skip to main content

Privacera Documentation

With default Value - GET_UG_ATTR_NAMES(‘default_value’)

Description: returns the list of attributes keys mapped to the user groups to which the querying user is a member. If the user is not a member of any group or the group of which the user is a member does not have any attribute, ‘default_value’ will be returned. Can be used for comparison of numeric values.

Example:

  • The user is a member of the groupadmin(attribute: 10=auditor), GET_UG_ATTR_NAMES(‘20’) will return10.

  • The user is a member of groupadmin(without any attributes),GET_UG_ATTR_NAMES(‘20’) will return‘20’.

  • The user is not a member of any group,GET_UG_ATTR_NAMES(‘20’) will return20.

Usage: can be used in:

  • Row Level Filter Policies - row level filters expressions

  • Example:dept_id in (${{GET_UG_ATTR_NAMES(‘20’)}})

  • Masking policy - Custom masking condition

  • Example:CASE WHEN dept_id in (${{GET_UG_ATTR_NAMES(‘20’)}}) THEN {col} ELSE '0' END

  • Policy conditions:

  • Example: GET_UG_ATTR_NAMES('dept')=='location'