Introduction: Sisense supports row-level security (RLS) rules on data models, allowing administrators to control data access at a granular level per user and user group. However, in some environments, RLS rules may be applied inconsistently — data that should be restricted is sometimes exposed, particularly when toggling field visibility in a widget. This behavior is not caused by rule conflicts, but by insufficient system resources — specifically, an undersized DataContextRulesCacheSize and limited memory allocation — which cause the security rule engine to behave unpredictably. This article explains how to resolve this issue by adjusting the relevant settings in the Configuration Manager. Step-by-Step Guide: Check the number of existing data security rules. Self-hosted environment Run the following command: kubectl -n sisense exec -it `kubectl -n sisense get pods | grep sisense-mongodb | head -1 | awk '{print $1}' ` -- mongosh prismWebDB --eval 'db.dataContext.find().count()' Sisense Cloud environment Connect to Repository from ElastiCube data model using MongoDB connector and execute query. Use the following connection settings in the MongoDB connector. Location: Single-Node: sisense-mongodb.sisense Multi-Node: sisense-mongodb-headless.sisense Port: 27017 Default Database: prismWebDB Authentication Mechanism: No Authentication Define the following table query: SELECT Count(*) AS NumberOfDataSecurityRegistrations FROM "prismWebDB"."dataContext" Preview data of the query and check the returned value Check the DataContextRulesCacheSize parameter value Log in to Sisense as a user with Admin privileges. Open Configuration Manager : Admin > Server & Hardware > System Management > Configuration Click the Logo in top left five times to open the left pane, and select Query in the left pane Check the DataContextRulesCacheSize.value parameter, the default value is 1000 Update the DataContextRulesCacheSize parameter value greater than the value obtained in Step 1 Update MemoryLimit parameter value (default: 1024m) to 2G or greater value If you want to increase the MemoryLimit parameter more than 2G, you have to update the memory limit of the query deployment, which should be greater than Memory Limit + 1G. Save the changes and restart the relevant services. Verify that data security rules are now applied consistently across all widgets. Conclusion: Once these configuration changes are applied, the RLS rules should be enforced reliably. Increasing the DataContextRulesCacheSize ensures the system can cache a sufficient number of data context rules without dropping or misapplying them under load. Add a disclaimer for custom solutions . Disclaimer: This post outlines a potential custom workaround for a specific use case or provides instructions regarding a specific task. The solution may not work in all scenarios or Sisense versions, so we strongly recommend testing it in your environment before deployment. If you need further assistance with this, please let us know.
Community Discussions
Dive into dynamic discussions. Every interaction contributes to a vibrant community experience. Join us for themed challenges, live events, and collaborative activities. To create a new post, select a category from the left-hand panel, then choose a relevant topic.
- DiscussionEiji OzawaAdmin1 week ago
- Discussion
Mia IsaacsonExporting a dashboard as a PDF or PNG works fine when the audience is internal, and the need is simple. But as soon as a report needs to go out to different groups, with different branding, formatted for a specific audience, that's a different use case than a general export was ever built to solve. On September 17 , we're running a live demo of Report Studio, a report design and delivery layer built inside Sisense for exactly this gap: getting data out of Sisense in a format that's actually ready for a client, an exec, or anyone who isn't going to open a dashboard. This isn't a slide deck. It's a live build, start to finish. Here's what you'll see: Building a report from scratch: widgets, text boxes, a logo, and shapes added to the canvas, then exported manually A side-by-side of a native Sisense PDF export vs. the same data in Report Studio Applying a template to the report we just built, and how much manual layout work it removes Toggling between brands live on a single report, with the recipient's brand assigned automatically based on their user or group Token substitution across text boxes, file name, email subject, and email body Export by dimension, both on demand and as part of a scheduled delivery The actual email a recipient outside your organization receives, report attached Admin-side monitoring: job history and delivery oversight at scale Register here: https://www.qbeeq.io/webinars-register Drop questions here, and we'll answer them live during the webinar!
1 month ago - Discussion
Becky Crittenden - DiscussionIhor YokhymAdmin
Introduction In multi-tenant Sisense, a Data Designer may hit intermittent 3404 "Connection is Missing" build errors that reference the wrong tenant's connection, while an admin builds successfully. This guide explains why connection scoping causes it and how to fix it. Step-by-Step Guide Why this happens In multi-tenant Sisense, connections are isolated per tenant and per owner. The 3404 "Connection is Missing" error at build time means the build service cannot resolve the connection OID within the scope of the user running the build. When a Data Designer does not own or cannot see the connection the cube references, resolution falls back and intermittently binds to the wrong tenant's connection - which is why the reported missing connection changes between build attempts with no changes to the cube. An admin succeeds because admin visibility spans all connections. Step 1 - Share the connection with the Data Designer As an admin, go to Admin → Data → Connections. Open the connection the cube uses and share it with the Data Designer user. Grant access with edit rights so builds can resolve it. Repeat this for every connection the cube references. Step 2 - Verify tenant scoping while sharing Confirm the Data Designer is operating in the same tenant the connections belong to. Also confirm that no same-named connection exists in another tenant, since duplicate names across tenants can cause the build service to bind to the wrong one. Step 3 - Refresh the connection binding (if sharing does not clear it) If the error persists after sharing, re-bind the connection at the table level. For each affected table: Change Table → re-parse the SQL expression → Done. This forces Sisense to re-resolve the connection binding for that table. Conclusion Cross-tenant 3404 “Connection is Missing” during builds are almost always a connection-scoping and permissions issue rather than a broken cube. Sharing every referenced connection with the building user, verifying correct tenant scope, and re-binding table connections resolves the error. The key takeaway: a non-admin build user must have visibility of every connection the cube depends on. References/Related Content Connecting to Data / Connection Manager Sisense Multitenancy Building ElastiCubes
1 month ago - Discussionkgupta_egencia
- Discussion
Ido DarnellIf you manage Sisense, you've had some version of this conversation: someone asks for a report that actually looks like a finished document, not a dashboard screenshot with the edges cut off. There are more ways to solve this than most admins realize, and each one solves a different piece of the problem. A quick rundown: Native PDF export - zero setup, but the layout is whatever the dashboard happens to produce. No control over page breaks, no way to add narrative text, and pivot tables cut off at the edge of the screen. Sisense Report Manager - solid scheduling and delivery, but it's still exporting the dashboard as-is. No design layer, no multi-dashboard composition. Jasper Reports - genuinely pixel-perfect for table and pivot widgets specifically, if you have developer resource to build and maintain JRXML templates. Doesn't touch charts or KPI widgets. SAP Crystal Reports via ODBC - full design control, but it pulls your data out of Sisense entirely to do it, which is a real consideration if data residency matters to you. Where this leaves most teams: something that handles scheduling, or something that handles pixel-perfect tabular data, but not both, and rarely anything that lets you design a report as its own document rather than a dashboard export. That's the gap QBeeQ Report Studio is built for: a canvas inside Sisense where you design the report as a report - pulling from multiple dashboards if you need to, with full control over layout, brand, and every widget on the page. Report Studio Deliver , our scheduled distribution layer, is coming in beta this month. For the full breakdown with a side-by-side comparison table, here's the complete write-up .
3 months ago