Row-level security for this scenario should be defined in the semantic model so the governed analytical layer determines which records each user is allowed to retrieve. By applying RLS at the semantic-model level, the access rule travels with the analytical definitions used by metrics, visualizations, dashboards, and agentic experiences instead of depending on a particular dashboard layout.
Dashboard filters and visualization properties are presentation controls. They can alter what appears on a given screen, but they are not an appropriate substitute for a security rule because a user could potentially access the same underlying semantic content through another approved analytical surface. The restriction therefore belongs in the model that governs how analytical queries resolve against the sensitive HR dataset.
For an HR scenario, the RLS rule can be based on attributes such as employee, manager, department, region, or another authorized access dimension. The objective is to ensure that every downstream analytical experience receives only the rows permitted for the signed-in user. This centralizes security behavior and reduces the risk of inconsistent filtering across dashboards.
References/Topics: Data Setup - > Semantic Models - > Row-Level Security - > Governed HR Data.