How can we restrict data to the logged-in user?

We aim to display data in web forms based on the logged-in user. We have created "Users," grouped them, and assigned application roles such as Data Integration - Drill Through, Create, and Run to these groups. For example, we have Sales Managers (Power User, Viewer, User) and Sales Reps (Viewer, User). However, when a Sales Rep logs in, they should only see data relevant to their role, but currently, they can see all data.

To address this, we created Cell Level Security for the Resource (Anchor) Dimension and applied a rule to exclude the descendants of the Sales Manager by setting their access to "deny read."