Automated and delegated model-based row level security

A computer implemented method to automatically control access of a user to data of a business intelligence (BI) system on a row level, the method comprising:

• selecting a user to be secured;
• retrieving, from a memory of the computer, a business group of a BI model, wherein access to a business entity of the BI model is secured based on the business group;
• retrieving a plurality of values of the business entity;
• selecting at least one value of the plurality of values;
• and
• a processor of the computer, securing the user by assigning the user to the business group for the at least one value, wherein requests from the user to access the business entity are filtered based on the at least one value.

A non-transitory computer readable medium storing instructions thereon, which when executed by a processor cause a computer system to:

• select a user to be secured;
• retrieve a business group of a BI model, wherein access to a business entity of the BI model is secured based on the business group;
• retrieve a plurality of values of the business entity;
• select at least one value of the plurality of values;
• and
• assign the user to the business group for the at least one value, wherein requests from the user to access the business entity are filtered based on the at least one value.

A computer implemented method to automatically control access to business intelligence (BI) data, the method comprising:

• retrieve a plurality of securable business entities from the BI model;
• select a business entity from the plurality of retrieved business entities, wherein the business entity having a plurality of values;
• based on the selected business entity, generating a corresponding business group to secure the selected business entity;
• and
• secure the selected business entity by assigning the business entity to the business group, wherein access of a user to the plurality of values of the secured business entity is filtered according to a membership of the user to the business group.