Forum Discussion

Raketenrudi's avatar
Raketenrudi
Regular Visitor
6 months ago
Solved

RLS managed ‚Deanonymization‘

Hi,   I need to have data aggregation on Company Level. I.e., Sales data.  Everyone may see the total value and/or other accounts in an anonymized version.  I tried a pseudo-anonymized appr...
Data Protection
  • Raketenrudi's avatar
    Raketenrudi
    6 months ago

    Hi all,

     

    in the end it was a mix of all - and I am not really at the end yet. So far: 

     

    • I created a randomized ID in the main query which changes with each daily refresh. RandomID is the basis of all visuals. 
    • Names_ is still under RLS and unrelated to main_
    • in Main_ I added a measure 'Name' returning the clear name (I.e., Ben) when available in names_, else returning classified
    • Example bar chart: use RandomID for category axis. Hide Axis. Use clear name as data label ✅ 

    works well since, RandomID is really hard to track back AND all visuals work fine due to RandomID being a column and not a measure. 

     

danextian's avatar
danextian
Super User
6 months ago

Hi Raketenrudi 

RLS is applied at the semantic layer, so it cannot be overridden by measures. Calculated columns also do not change based on who is logged in, so that approach will not work. You will need a table that is not affected by RLS and use measures to show Ben’s name while classifying the rest. I have a YouTube tutorial that explains how to anonymize other users while keeping the name of the currently logged-in user visible. https://youtu.be/qL_p6OLDyQI 

  • Raketenrudi's avatar
    Raketenrudi
    Regular Visitor
    6 months ago

    Hi, 

     

    nice approach! Though, in my case it could not work. 

    as far as I know calculated tables and/or columns will use the user which is used for the daily refresh rather than the user looking at the report.. correct?