You are designing access controls for a shared analytics workspace used by multiple government agencies. Each agency can see only its own rows, while a small set of cross-agency administrators can view approved shared datasets. The same semantic model backs dashboards, exports, and ad hoc queries, so the security layer has to work consistently across all access paths.
How would you design Row-Level Security for a multi-agency workspace with compartmentalized access?
You are designing access controls for a shared analytics workspace used by multiple government agencies. Each agency can see only its own rows, while a small set of cross-agency administrators can view approved shared datasets. The same semantic model backs dashboards, exports, and ad hoc queries, so the security layer has to work consistently across all access paths.
How would you design Row-Level Security for a multi-agency workspace with compartmentalized access?