Order of Precedence in PolicySync Filter by Group and Filter By Role

If Filter by Group is set to true, then the value of Filter By Role is ignored. Filter By Role is considered only if Filter by Group is false.

For example, with PostgreSQL:

  • When POSTGRES_MANAGE_USER_FILTERBY_GROUP is set to "true", Privacera checks if the user belongs to the groups in POSTGRES_MANAGE_GROUP_LIST.

  • When POSTGRES_MANAGE_USER_FILTERBY_ROLE is set to "true" and POSTGRES_MANAGE_USER_FILTERBY_GROUP is set to "false", Privacera checks if the user is assigned to a role in POSTGRES_MANAGE_ROLE_LIST.

This order of precedence applies to the following connectors:

  • Databricks SQL

  • Google BigQuery

  • Microsoft SQL Server

  • PostgreSQL

  • Redshift

  • Snowflake