Design Access control in SSAS Tabular Model

Question

Hi Everyone,

I need some help to design the dynamic access control in SSAS tabular model.

Below is the requirement:

1. Row level security but access aggregate level data
2. Using AD groups (AD groups contain the employee email address - UserId)

Note: I have design the tabular model as pure Star Schema. All Employee connect to Department

See below model:

Please feel free to ask any question for any clarification.

Answer 1

1. will require a separate table with aggregate data. Secured detailed table will not allow the engine to calculate totals including secured data.
2. will require importing AD group membership data into the model