Financial Services Compliance Dashboard with RLS and MIP

The challenge

The client had to demonstrate to regulators that sensitive and confidential data in reports was accessible only to authorized users and that access was auditable. They needed a single compliance and risk dashboard that could show different slices of data by role and region, with clear lineage and MIP (Microsoft Information Protection) alignment.

• Strict regulatory requirements for data access and audit
• Need for role- and region-based data boundaries
• Requirement to align with MIP/sensitivity labels
• Single dashboard with multiple audience segments

Security model

We designed a security model that combined RLS (row-level security) for data filtering by role and region, sensitivity labels on datasets and reports, and audit logging. Only users with the right label and role could see the corresponding data. All access was logged for compliance reviews.

Implementation flow

We implemented in stages: (1) define roles and RLS rules in the semantic model, (2) apply sensitivity labels to datasets and reports, (3) configure audit and monitor access, (4) run internal and external audit readiness checks.

Key outcomes

The compliance and risk dashboard went live with RLS and sensitivity labels in place. The client passed their regulatory audit with no findings related to report access or data boundaries. Audit logs are used for ongoing compliance monitoring.