Quicksight embedded reports to Only Show Client Data Based on User's Assigned Clients without using row level security

Question & Answer
, ,
1

Please suggest any solution or is it possible to do without using RLS?

2

Hi @kanika and welcome to the QuickSight community!
While I would strongly suggest using RLS as it will be the most secure way, there is one alternative option you could utilize.

  • Remove the parameter control from the dashboard so that the user cannot change it (but make sure all visuals are filtered by that parameter value).
  • Then you can add this onto the end of your dashboard url (after ID): #p.ParameterName=ParameterValue (make sure to add in your case sensitive parameter name and parameter value).

Let me know if you have any additional questions!

3

Hi @kanika,
It’s been awhile since we last heard from you; following up to see if you had any additional questions?

If we do not hear back within the next 3 business days, I’ll close out this topic.

Thank you!

4

Hi @kanika,
Since we haven’t heard back, I’ll go ahead and close out this topic. However, if you have any additional questions, feel free to create a new post in the community and link this discussion for relevant information if needed.

Thank you!

5

Follow up question about the Parameter approach:

Since the parameter is exposed in the embed URL on the client side, wouldn’t a user have the ability to change the parameter’s value in the URL and generate the dashboard? Or is there another limitation that would ensure a user couldn’t tamper with the parameter value so that they could see data for which they are not provisioned?