OTBI Report (Dashboard) Security Not Mirroring Fusion

Content

My understanding of the OTBI security is that security applied in Fusion will also be applied when running reports.  You'll see the same data.  However, if additional reporting data is required then this can be achieved by having a separate role, as documented in https://cloudcustomerconnect.oracle.com/posts/7465f7e09d and mentioned on the OTBI workshop I attended yesterday.

We have an odd situation where HRBP's with read only access in Fusion and access to the same data in reports have had a Dashboard assigned to them, and in this Dashboard they can now see other employees from outside of their security profile data (salary increases).  They cannot query or view these employees records within Fusion.