Hi San,
Both requirements are possible.
For 1, the below metadata permissions config would allow READ permission on only the Name attribute and hide everything else.
[
{
"uri": "configuration/entityTypes/Individual",
"permissions": [
{
"role": "ROLE_API",
"access": [
"READ"
]
}
]
},
{
"uri": "configuration/entityTypes/Individual/attributes",
"permissions": [
{
"role": "ROLE_API",
"access": []
}
]
},
{
"uri": "configuration/entityTypes/Individual/attributes/Name",
"permissions": [
{
"role": "ROLE_API",
"access": [
"READ"
]
}
]
}
]
For 2, the below config would grant READ permissions on only those profiles that belong to the country US
[
{
"uri": "configuration/entityTypes/Organization",
"permissions": [
{
"role": "ROLE_API",
"filter": "equals(attributes.Address.Country,'US')",
"access": [
"READ"
]
}
]
}
]
------------------------------
Thanks,
Snehil Kamal
Senior Solution Architect
Reltio
Bangalore
------------------------------