Forum Discussion
Hide table/column (OLS) for everyone except a few users
Hi. This is tricky. The roles usually apply for delimited users, not all company. Once you create the role, you can add the users that you want to hide the column, but if you are looking the other way arround like "just configure the ones that CAN" that's something that can't be done by default.
I'm thinking an approach. You can create a group at AD with all users of the company. Set the role that hide the table for that group. Then for the 5 people that should see the tables, you can add them as members at the workspace. As far as I remember when the user has build permission at the workspace the rule won't apply for them (talking about RLS I assume it might work like that for OLS).
I hope that helps, or make sense. Otherwise you will have to create a group for the people you want to hide the table and add people each time you share with the new user.
Super UserHi. This is tricky. The roles usually apply for delimited users, not all company. Once you create the role, you can add the users that you want to hide the column, but if you are looking the other way arround like "just configure the ones that CAN" that's something that can't be done by default.
I'm thinking an approach. You can create a group at AD with all users of the company. Set the role that hide the table for that group. Then for the 5 people that should see the tables, you can add them as members at the workspace. As far as I remember when the user has build permission at the workspace the rule won't apply for them (talking about RLS I assume it might work like that for OLS).
I hope that helps, or make sense. Otherwise you will have to create a group for the people you want to hide the table and add people each time you share with the new user.
I've accepted your response as a solution because it is a solution.
However, I noticed after publishing a report with a single role that:
-Anyone with Workspace Viewer access that have been granted the role
-Workspace Members & Admins
Will be able to see the data, but anyone not in either of those categories will be allowed to view it by default.
So no need to implement crazy logic, as the service will automatically block out people that are not admins, members, or viewers with a role.
- ibarrau
Yes. That's why I said that's tricky. Usually the way to go is hiding for a set of people, but going the other way around like hiding for all except, that's tricky for rules. That's why I have said something about security groups in AD. That might help. Building rules for AD Groups.
Regards