Hi guys. Here's a situation. We have a folder called "Chicago office" in WEBI. This folder can be accessed by many employees with view on demand access and inheritance to any sub folder. But now there is a need to have some HR (Human Resources) data for Chicago office. And this data is quite sensitive, so only few employees can see these reports. Logically would be to place HR folder inside "Chicago office" folder as this is Chicago office HR. However I have a real headache to figure out how to grant access to this HR folder only to few employees.
Solution 1: I remove the inheritance on HR folder for any existing employees/groups. And then set required permissions to those few employees.
Problem: If a new employee is required to have access to "Chicago office" folder, then setting this access would automatically give access to HR folder because of inheritance. So administrator would need to remove the inheritance from HR folder for every new user. Which is prone to errors...
Solution2: I put HR folder outside "Chicago office" (under top level) folder. Grant required access.
Problem: Could become a messy structure if more of such cases would come out
Solution3: any suggestions?
Goal: I want administrator to ALWAYS have to grant EXPLICITLY access in order to see that folder ("HR")
