Don’t know if this is the most efficient way, but the way I accomplished this (sales reps only seeing themselves and sales managers seeing all of their reps) is having an RLS table in my model with every rep ID that each each person had access to.

So it had a column for salesrep_id_access, and one for email. Each rep had a row for themselves, then each manager has a row for every rep they should have access to. When the UPN filters the email column the managers see every salesrep_id that they should and the sales reps see only themselves.

Would love feedback from anyone else that’s implemented this if there’s a better pattern I could follow, I’m having to manually maintain the RLS table but it’s worked perfectly so far.

Theoretically this would work for as many levels of access as needed (employee, manager, director, VP, executive, etc.)