Forum Discussion
Dynamic Row Level Security
This is what my department has been tasked with to mirror PBI to what other data individuals see in our other systems. Filtering down to just show what they have full access to is in the RLS table was what I started with, but now we need to make sure they can see all employees (not just the filtered down people) but only have access to their permissioned data for sensitve data fields with other values just simply being blank.
if you have a non-sensitive table then it must not be joined to (be controlled by) the RLS dimension tables.
The non-sensitive table currently is only joined to the sensitive table in a single direction relationship (NS filters the S table), if that helps.
They should not be joined at all. Think of them as separate fact tables.