Forum Discussion

Optimusprime_25's avatar
Optimusprime_25
Resolver I
3 years ago

Dynamic RLS based on multiple conditions in multiple tables

Hi Team,

 

We have a requirement where we have to dynamically restrict the data based on user's unit and country.

Please find below tables which we have

User Details Table

IDCOUNTRYUNITREGIONUser_ID
1AlgeriaABCNA[email protected]
2ArgentinaABCNA[email protected]
3AustraliaABCNA[email protected]
4DenmarkXYZAPAC[email protected]
5HungaryXYZAPAC[email protected]
6South KoreaXYZNA[email protected]

Country Table 

COUNTRY
Algeria
Argentina
Australia
Denmark
Hungary
South Korea

Unit Table

UNIT
ABC
XYZ

Main Table

UNITCOUNTRYREGIONCOL1COL2COL3COL4COL5
ABCAlgeriaNA     
ABCArgentinaNA     
ABCAustraliaNA     
XYZDenmarkAPAC     
XYZHungaryAPAC     
XYZSouth KoreaNA     

With the help of Dynamic RLS we have to restrict the Main table by making use of USERPRINCIPALNAME and also we have to restrict user's country and unit as well in the report.

 

Thanks in advance.

Data Protection
General Comment
Interesting Links
Need Help
Show and Tell
Tips and Tricks
Tutorial Requests

4 Replies

  • v-yinliw-msft's avatar
    v-yinliw-msft
    Community Support
    3 years ago

    Hi Optimusprime_25 ,

     

    Could you please show me what your desired result looks like?

     

    Best Regards,

    Community Support Team _Yinliw

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

     

    • Optimusprime_25's avatar
      Optimusprime_25
      Resolver I
      3 years ago

       Hello v-yinliw-msft 

       

      EMP1 should be able to see the data in which country and unit he has access

      Similarly EMP2 should be able to see the data in which country and unit he has access.

       

      All countries contains both ABC and XYZ unit data, but access should be restricted on country and unit as well.

       

      Thanks

  • Optimusprime_25's avatar
    Optimusprime_25
    Resolver I
    3 years ago

    Hello v-yinliw-msft ,

     

    When EMP1 access the report then he should be able to see the data from the country and the unit in which he has access.

     

     

    In above countries we can have data of Unit XYZ but EMP1 should be able to see the data of Unit ABC only from the Algeria, Argentina, Australia countries.

     

    Similarly when EMP2 access the report then he should be able to see the data from the country and the unit in which he has access.

     

    In above countries we can have data of Unit ABC but EMP2 should be able to see the data of Unit XYZ only from the Denmark,Hungary,South Korea countries.

     

    I hope now you will undertand the outcome of this requirement

     

    Thanks.