How to organize workspaces with few reusable datasets and high degree of security?

[CBO2404]

What's the best way to organize workspaces? (Less maintenance and the greatest possible security)

I would like to:

• use one dataset for multiple reports (less maintenance in measures)
• use a report for multiple groups of users (less maintenance in reportdesign)
• define security on certain datasets with privacy-sensitive information (such as salary and absenteeism). I don't want employees to be able to access some (e.g. the salary) datasets.
• have 1 app per group of people

This is the situation I have but the security is not okay. How can I organize this? Which workspaces can I create best with which permission.

And how do I hide the dataset menu-option in the Apps environment for endusers?

[lbendlin · Accepted solution]

- use distribution lists for app access, ideally these lists should be managed by an external access management tool

- use RLS and OLS, but only if absolutely required. Most of the time they are contraproductive

- you cannot hide the datasets from the users that have access to the apps.  "If you don't want them to steal your data, don't show them your data".   Think of it not only from the security perspective but also from the UX perspective.  If you frustrate your users they will seek help elsewhere.