Datamart Row Level Security Options

[crost]

Hello, 

I am working to build out some HR Dashboards for my organization, which understandably would require limitations on who can view what internally.  However a few different issues are cropping up:

• There are situations where I would want an HR Business Partner to only see their purview, but also situations where I'd want them to see the entire organization's data. It seems to me like restricting their data views to be tied to their account would then make it impossible for them to see the holistic data they might want to have access to in another area of their work. Is there a way to make the RLS setup in the datamart something I can select per report to allow for this kind of flexibility across different reports/dashboards?
• Similarly, there is a hope that in the long term, we'll be able to make a high-level overview that's viewable by lots of different people outside of the HR organization using the same data.  If there is Row Level Security implemented, that would preclude the average individual contributor from being able to participate in this, correct?

Thanks!

[Migasuke · Accepted solution]

Hi @crost ,

If you want to use RLS, bear in mind that the RLS will behave the same way in all reports, which are connected to the Datamart / Dataset.

So in case you want to restrict view in one report and the same person should have different restriction in a different report, it's better to do some page level security trick (https://www.youtube.com/watch?v=ye4WIJDfdpY) or have additional datasets and each has different RLS logic.

[crost]

That's what I was afraid you were going to say.  Thank you!