Restrictions

Restrictions limit the data visible to specific users or groups across all views, dashboards, workbooks, and Excel Add-in reports in SEI. Unlike roles and authorization levels that control what users can do, restrictions control what data they can see. A user with restrictions applied will only ever see the records that match those restrictions, regardless of which view or report they open.

Restrictions work at two levels. Global restrictions use global parameters and apply across all data models that contain those parameters. Data model restrictions are expressions written against a specific data model and apply only to that model.

important

When a user belongs to multiple groups with conflicting restrictions, the result can be too restrictive and return no records at all. For example, if one group restricts to Company = X and another to Company = Y, the user may see nothing. Use the Combination Option on groups to control how restrictions from multiple groups interact.

When to add restrictions

• Filter data by team or territory so a sales rep only sees their own region, or a manager only sees their department's records.
• Enforce row-level security without modifying individual views or reports. The restriction applies automatically everywhere.
• Meet compliance requirements by ensuring sensitive records are never visible to unauthorized users, regardless of what they open.

Manage restrictions

The Manage dropdown controls what the page shows. Select Users, Groups, or Data Models depending on what you want to configure. The page layout changes based on your selection.

Users

Users

Start from a user to manage their individual restrictions. The top list shows all users with their current General Role, Display Level, and Edit Level. Selecting a user loads the Global Parameters, Global Restrictions, Data Models, and Data Model Restrictions panels below.

To add a global restriction:

1. In the Manage dropdown, select Users.
2. Select the user from the top list.
3. In the Global Parameters panel, select the parameter to restrict on.
4. Select the > arrow to move it to Global Restrictions.
5. Set the Operator and Value for the restriction.
6. Click Apply Changes.

To add a data model restriction:

1. In the Data Models panel, select the data model to restrict.
2. Select the > arrow to move it to Data Model Restrictions.
3. Select Restriction Builder and build your restriction expression.
4. Click Apply Changes.

To remove a restriction, select it in Global Restrictions or Data Model Restrictions and select the < arrow to move it back.

Data Models

Data Models

Start from a data model to see and manage which users and groups have restrictions on it. The top list shows all data models. Selecting one loads the Users and Groups panels, each paired with a Restricted Users and Restricted Groups panel showing who already has restrictions applied.

To restrict a user on this data model:

1. In the Manage dropdown, select Data Models.
2. Select the data model from the top list.
3. In the Users panel, select the user to restrict.
4. Select the > arrow to move them to Restricted Users.
5. Select Restriction Builder and build your restriction expression.
6. Click Apply Changes.

To restrict a group on this data model:

1. In the Groups panel, select the group to restrict.
2. Select the > arrow to move it to Restricted Groups.
3. Select Restriction Builder and build your restriction expression.
4. Click Apply Changes.

To remove a restriction, select the entry in Restricted Users or Restricted Groups and select the < arrow to move it back.

Groups

Groups

Start from a group to manage restrictions that apply to all its members. The top list shows all groups. Selecting one loads the Global Parameters, Global Restrictions, Data Models, and Data Model Restrictions panels below.

To add a global restriction:

1. In the Manage dropdown, select Groups.
2. Select the group from the top list.
3. In the Global Parameters panel, select the parameter to restrict on.
4. Select the > arrow to move it to Global Restrictions.
5. Set the Operator and Value for the restriction.
6. Click Apply Changes.

To add a data model restriction:

1. In the Data Models panel, select the data model to restrict.
2. Select the > arrow to move it to Data Model Restrictions.
3. Select Restriction Builder and build your restriction expression.
4. Click Apply Changes.

To remove a restriction, select it in Global Restrictions or Data Model Restrictions and select the < arrow to move it back.

Restriction Builder

The Restriction Builder is a dialog that opens when you select the restriction icon next to a data model in the Data Model Restrictions or Restricted Users or Restricted Groups panel. It provides a text editor and a set of tools to help you write the restriction expression.

Write your expression

The large text area at the top is where you write the restriction. You can type directly in it or use the tools below to insert values. After, select Validate to check the expression for syntax errors before saving. Fix any errors reported, then select Save to apply the restriction.

Field	Description
Operator buttons	Use operator and function buttons above the editor to quickly insert operators, brackets, or keywords.
Scripts Keywords	Access to built-in functions and language elements you can insert into the expression: Functions: standard SQL and calculation functions. BI Functions: SEI-specific functions available in expressions. Statements: structural keywords such as IF, CASE, or WHEN. Operators: logical and comparison operators. Constants: fixed values such as NULL, TRUE, or FALSE. Objects: references to objects available in the current context.
Tables	Lists the actual database tables available in the selected data model, such as ZINVOICE, ITMMASTER, or BPCUSTOMER. Expand a table to browse its fields and select one to insert it directly into the expression.
Others	Insert global variables, special variables, or data model parameters.

note

For IN and NOT IN operators in data model restriction expressions, use SQL list syntax: IN ('VALUE1', 'VALUE2', 'VALUE3')