Hide table/column (OLS) for everyone except a few users

[vrumay2]

Hi, 

I want to hide a table in my report from everyone, except just 5 users that should have access. 

I've created a "SecretView" role, and added the 5 users to it, but how do I hide the table for everyone else in the company?

[ibarrau · Accepted solution]

Hi. This is tricky. The roles usually apply for delimited users, not all company. Once you create the role, you can add the users that you want to hide the column, but if you are looking the other way arround like "just configure the ones that CAN" that's something that can't be done by default.

I'm thinking an approach. You can create a group at AD with all users of the company. Set the role that hide the table for that group. Then for the 5 people that should see the tables, you can add them as members at the workspace. As far as I remember when the user has build permission at the workspace the rule won't apply for them (talking about RLS I assume it might work like that for OLS).

I hope that helps, or make sense. Otherwise you will have to create a group for the people you want to hide the table and add people each time you share with the new user.

[vrumay2]

I've accepted your response as a solution because it is a solution. 

However, I noticed after publishing a report with a single role that:

-Anyone with Workspace Viewer access that have been granted the role

-Workspace Members & Admins

Will be able to see the data, but anyone not in either of those categories will be allowed to view it by default.

So no need to implement crazy logic, as the service will automatically block out people that are not admins, members, or viewers with a role.

[ibarrau]

Yes. That's why I said that's tricky. Usually the way to go is hiding for a set of people, but going the other way around like hiding for all except, that's tricky for rules. That's why I have said something about security groups in AD. That might help. Building rules for AD Groups.

Regards