Forum Discussion
Dynamic Row Level Security
This is what my department has been tasked with to mirror PBI to what other data individuals see in our other systems. Filtering down to just show what they have full access to is in the RLS table was what I started with, but now we need to make sure they can see all employees (not just the filtered down people) but only have access to their permissioned data for sensitve data fields with other values just simply being blank.
Super UserYou are doing a little too much. Instead, create a single role, and set the rule for both RLS tables to
[Email Address]=USERPRINCIPALNAME()
This is what my department has been tasked with to mirror PBI to what other data individuals see in our other systems. Filtering down to just show what they have full access to is in the RLS table was what I started with, but now we need to make sure they can see all employees (not just the filtered down people) but only have access to their permissioned data for sensitve data fields with other values just simply being blank.
- lbendlin
Sounds like you want to implement OLS in addition to (or instead of) RLS?
That is an excellent question. I was told to go the RLS route and that it should work if there is a sensitive and non-sensitive table, but past that little bit of guidance have been trying to figure out.