Forum Discussion
Dynamic Row Level Security
This is what my department has been tasked with to mirror PBI to what other data individuals see in our other systems. Filtering down to just show what they have full access to is in the RLS table was what I started with, but now we need to make sure they can see all employees (not just the filtered down people) but only have access to their permissioned data for sensitve data fields with other values just simply being blank.
That is an excellent question. I was told to go the RLS route and that it should work if there is a sensitive and non-sensitive table, but past that little bit of guidance have been trying to figure out.
if you have a non-sensitive table then it must not be joined to (be controlled by) the RLS dimension tables.
The non-sensitive table currently is only joined to the sensitive table in a single direction relationship (NS filters the S table), if that helps.
They should not be joined at all. Think of them as separate fact tables.