How to show data in columns as xxxxx for particular ad groups?

[Paw123]

Hi Team,

I have a datamodel like below. I have a requirement like from below 3 columns 

1. For AD Group 1 these columns records need to be visible as "xxxx" instead of original records

2. For AD Group 2 these columns records need to be visible as it is in source

Columns are 

1. Transaction Description

2. Instructor Name

3. Customer Name.

Please can you help me to achive this. Tabular Editor 3 i have already tried its not working. please suggest any other solution is there.

[Anonymous]

Hi @Paw123 

It seems that the workaround from @Chewdata is the possible solution.

Could you tell me if your problem has been solved?

If it is, kindly Accept it as the solution. More people will benefit from it.

Thank you.

Best Regards    

Zhengdong Xu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Chewdata · Accepted solution]

Hey, 

A way of solving this, however maybe not the most elegant since it will double your rows, is to create rows for both roles and use RLS.

1. Create Table for groups
2. Add a MergeId = 1 to both fact table and the groups table.
3.  Merge both tables to create a cartesian product (this will double the rows).

4. Add New column: if Group = "A" then [ColumnX] else "Confidential"
5. Create RLS Groups for both Group A and B.

[MNedix]

Hi @Paw123,

For requirement #1, is it mandatory that the AD1 see that a/the record is there but they can't see what it is or it is enough not to see the record?If it's the latter, you could achieve what you want with Row-Level Security (RLS). You basically create a role for AD1 in which you "hide" or filter out what you don't want them to see. The rest of the users, assuming they are AD2, will be able to see everything.

For more documentaiton, please see here --> https://learn.microsoft.com/en-us/fabric/security/service-admin-row-level-security

If this answered your question then please mark it as the solution so others can see it.

Best,

[Paw123]

Hi @MNedix Thanks for your reply.

For AD1 group when they have login they should see "XXXX" or "Confidential" word on Transaction description column 

For AD2 group when they have login they should see original transaction description records.

Please can you provide the syntax for RLS for this scenario. There are around 1k records in Transaction description field how to filter static way I am looking for dynamic solution

[MNedix]

Can you provide a sample of the data, including what you want be seen as "XXXX" or "Confidential"?