Row level access implementation

Question & Answer
, ,
1

Hi All,

In my use case, Quicksight is having multiple market data.
Any user created in Quicksight can have 1 or more than 1 market access..
But at time, the user can access only 1 market data based on the selection while login in my application.

I want to generate the Quicksight url which provides only selected market data access based on the JWT token provided. [Even though the same user is having more than 1 market access.]
HOw can I implement this as User based access in Quicksight?

2

Hi @Arshad ,
you can register several users instead of a single user in QuickSight. Instead of a user that can access 3 markets you will have 3 users, but each of them will be able to access a single market only. So you will be able to generate the Quicksight URL which provides only selected market data access.
You also can consider using a parameter to set a selected market (it will work for embedding a dashboard). It depends on your requitements.

3

Hi @Arshad - I believe you should pass 2 parameter, user id and market details and that can be used to filter the data ( RLS). This way even if a single user has multiple market data, user can only see one market data ( depending upon the market parameter value)

Regards - Sanjeeb

4

Hi @Hrolol
We also thought the same but feel that user based licensing cost would go up.. or my understanding is wrong here?

5

Hi Sanjib,
yes, we can pass 2 parameters, but while URL generator is it possible and acceptable from Quicksight user point of view? a little more details would be very helpful for us.

6

Yes, it will increase expenses. If allowing user to chouse from available markets inside the dashboard does not work for you, I don’t think that there is an easy and secure way to implement your requirements at RLS level without adding extra users.

Do you embed a QuickSight session or certain dashboards? I suppose that you want to implement this kind of behavior because you want the market in dashboard to match the selected market in your application. In this case embedding dashboards (not a QuickSight session) could be a not bad solution - Using parameters in a URL - Amazon QuickSight. But you probably should learn more about sending parameter values to QuikSight.

7

Hi @Arshad,
It’s been awhile since we last heard from you on this thread, did you have any additional questions regarding your initial post?

If we do not hear back within the next 3 business days, I’ll close out this topic.

Thank you

8

Hi @Arshad,
Since we have not heard back, I’ll go ahead and close out this topic. However, if you have any additional questions, feel free to create a new post in the community.

Thank you