Understanding Custom Attribute Hierarchy

Custom attribute hierarchy is a structured approach for managing attributes across different levels within a system. This hierarchy is particularly relevant when the same attribute name is used at various levels, such as User Management System (UMS), Site, Group, and User. The priority order for these attributes, from highest to lowest, is as follows:

1. Tenant User-Level Attribute:
   This attribute is configured within a specific tenant for the user and takes precedence over all other levels.
   Tenant admin users and users with “Create and Manage” permission for the “Users and Groups” entity can manage tenant user-level attributes.
   For more details on permission: Manage Permission.
2. UMS User Attribute:
   Configured in the UMS for the user (Inherited from IDP Profile), this attribute is the next in line for priority.
   UMS admin users can manage only UMS user attributes.
   For more details on managing UMS admin access: Manage UMS admin access.
3. Group-Level Attribute:
   This attribute is set within a tenant group (Inherited from group) and can override site-level attributes.
   Tenant admin users, users with “Specific Group” permission, and users with “Create and Manage” permission for the “Users and Groups” entity can manage group-level attributes.
   For more details on permission: Manage Permission.
4. Site-Level Attribute:
   Configured in UMS for a specific tenant (Inherited from Site), this attribute has the lowest priority among the listed levels.
   UMS admin users can only manage the site-level attributes.
   For more details on managing UMS admin access: Manage UMS admin access.

The attribute configured at the user level for a particular site has the highest priority and will override attributes set at other levels. Additionally, group-level and site-level attributes can be overridden by user-level attributes, while group-level attributes can also override site-level attributes.

Additional References

• Secured Data Access with Custom Attribute
• How to Create Expressions Using Custom Attributes in Bold BI
• Steps to Add Custom Attribute in Query
• An efficient way of assigning permissions and custom attributes
• How to perform a bulk update of connection strings for all data sources using custom attribute?