I have data on team level and it can be grouped by higher org. levels unit and company. I have team leader, who should see all data, when visualized in unit or company level but only own team, when visualized on team level. In practise, this would mean, that team column is then included in the visuals, where data needs to be restricted. Team leader reports are separated from general unit/company level reports and they are published in apps.
I have a golden dataset with four fact tables. One possibility is to aggregate current team level data into unit level fact table and have no RLS on that. Then add team leader security role into current team level facts. But this would mean duplicating data and measures. This would secure the data best, I think.
Other possibility is to just make a copy of the dataset after each time, change has been done to it. Then create team leader report against the other with RLS and create unit/company level reports against the other one without RLS. Of course this is not so secure way, if developer creates a team level visualization and publishes it, a team leader can see all data, when there is no RLS assigned in that dataset.
Is there any other way to do this?
