How to fine-tune quicksight user permissions like deny actions

I want to apply a policy to prevent Author from deleting Datasets, but when I apply the deny policy to the quicksight-author-role as shown below, it does not apply.
If there is any other way to control the permissions of Quick Sight, please guide me.

{
“Version”: “2012-10-17”,
“Statement”: [
{
“Sid”: “Statement1”,
“Effect”: “Allow”,
“Action”: [
“quicksight:CreateUser”
],
“Resource”: “"
},
{
“Effect”: “Deny”,
“Action”: “quicksight:DeleteDataSet”,
“Resource”: "

}
]
}

Hi @kplee

Welcome to QuickSIght Community . You can share existing datasets to another Author user ( user-a) with Viewer level permission , to refer and use it and author (user-a) cannot delete/modify the shared dataset .

Thanks
Vinod

2 Likes