Forum Discussion
Role Level Security (RLS) based on Country and/or other criteria
Good day everyone, I would like to create a DAX measure under Manage Security Roles with the following logic: A small group of users can see all data in the table. The rest can only see data for...
This is quite complex that is why you do not get an answer quickly here.
Here are the conditions:
- Anyone in Team = "aa" AND Department = "A", they can see everything.
- The rest can see data for the country they are based in, except for data in Department = "A"
The first one is easy but this is not something you can solve with RLS. You need to create a security group in the active directory for these people. Alternatively, add them as contributors to the workspace so RLS does not even apply OR add them manually (i dont recommend this) to the "none" group or create a group in RLS without any filter. RLS is more about restricting data than giving full access.
For your second condition I would also set up two AD groups, one for all other users and one for department A specifically.
Then you set up RLS based on the country and just assign the "other than department A" people to that role.