Use RLS on a table without filtering other tables

[Anonymous]

Is it possible to stop a user seeing a table without it impacting the other related tables?

I have an extremely complex HR data model. RLS is based on a master cost centre list, but there are two copies of it, one for payroll and one for HR data.

I cannot use a single copy, as an employee can exist in payroll in one location for some payroll periods, and then site in another cost centre as their home for HR reports. The manager may need to see when that employee gets costed to their cost centre, but should not see their personal details.

So am left with two copies of this mapping. One drives HR data, the other payroll data. If i assign someone to the HR data, but use RLS to hide all payroll tables, then they filter out all the payroll data, but go on to filter out the HR data.

My solution was to create an effective barrier in the relationships between HR and Payroll data relationship directions, but the problem I have is some users need to be able to access both sets of data simultaneously (including myself).

Any ideas on the best approach to this?

[v-kelly-msft]

Hi  @Anonymous ，

Sorry,I'm a little confused,if you want someone to access both 2 tables,then you dont need to set the RLS to them,in other words,they can see all the data and no RLS rules are applied to them,and for those who you only want them to see part of the data,then you need to set the related RLS rules.

For reference,pls see below:

https://docs.microsoft.com/en-us/power-bi/admin/service-admin-rls

Best Regards,
Kelly

Did I answer your question? Mark my post as a solution!