Dynamic RLS based on two users tables

[Oussmissa]

Hello everybody,

I'm trying to implement RLS by Country and Brand at the same time based on two security tables.
Users who are in the security table by brand and other users who are in the 2nd security table by country.
We can have users who have access to the country but not the brand and the reverse case. ie users who exist in the first table but not the second and the reverse case.
We can have users who exist in both tables at the same time.

I have of course a Geography dimension table which contains the country code and brand code. this dimension is linked to my Sales fact table

Please help me how I can create a role (by country and brand at the same time) that takes these scenarios into consideration.

[Oussmissa]

Thank you for your response @Greg_Deckler.

I have tried this but by doing this, the RLS is only applied for the users that exist in the 2 tables at the same time.
for a user who exists in table 1 and not table 2 or vice versa, he sees nothing...

[Greg_Deckler]

@Oussmissa Oh yeah, you are right about that, let me think... What if you had a single users table related to your two user tables within just the user names and you applied the RLS there? I'm thinking it might end up with the same thing but maybe not?

[Greg_Deckler]

@Oussmissa So you cannot create two rules like:

Table User 1: USERPRINCIPALNAME() = [Email]

Table User 2: USERPRINCIPALNAME() = [Email]

And the obvious relationships to Dimension Geography from both tables.