This is a limitation in the Security Assist Access Rules Manager. You cannot use recordset values in Security Assist Rules. For this type of rule, you will need to use the Search For Boss show region utility.
If you have Search for BOSS installed, go to the server behaviors panel and click the plus button, then select Utilities -> Show Region Utility