RLS security : never seen that question before

Hi all,

I'd like to put RLS but by domain (Purchase, Sales, ...) which represents many tables.

Mister A is a purchase manager ([email protected])

Miss B is a sales manager ([email protected])

My need is when A is connected to the WebService, he only sees purchases tables (fact table and associated dimensions)

When B is connected, she doesn't see purchases tables but only sales tables and associated dimensions

(I have to indicate that my boss refused the option to make several Datasets (bu domain) or to manage many workspaces)

=> 1 dataset in 1 workspace

I know unsername and userprincipalname DAX functions. But for my case, that's not enough, I think.

To complete, A doesn't belong to line purchases tables or in supply dimension table. He's not a user who had created the line in the table. He has to see all lines in the Purchase Fact Table.

How can I put correctly a role to do that ?

Someone has an idea ?

Thanks in advance