How to stop employees viewing reports in 'Custom'?

Content

Hi 

We're having some trouble with report access. We're testing our reports and came across an issue where accounts with just the employee role can run reports containing highly sensitive information when the report was created via a data model. When they try to run a sensitive report via OTBI (analysis), they get an error and can't run it - as we expect. 

Ideally, we don't want accounts with just the employee role to even see the contents of certain folders. For instance, we don't want a regularly person in consultancy to be able to see all the names of the reports in the Shared > Custom > Human Capital Management folder. We only want the Human Capital Management folder to be shown to people with the right roles, let alone employees seeing the names of the reports and being able to run some of them.