Row Level Security in Quicksight

Question & Answer
,
1

Is it possible to implement the Row level security for the below mentioned case in quicksight ?

Example

Suppose you have the following data:

Main dataset

Divisions Sales
1234,1245 100
1234 200
1245 300

User dataset

Username Division
abc 1234
def 1245
ghi 1234

When the user “abc” logs in, the filter will be applied, and only rows that contain the division ID “1234” will be displayed, including the row with multiple division IDs (“1234,1245”). The resulting data will be:

Divisions Sales
1234,1245 100
1234
2

Yes this is possible. You need to create an excel file with two columns. First column should have header as “username” and in this column you will write the quicksight usernames who want/have access to this dashboard. In the second column, the header will be the exact column name as the field in the dataset. In this case it’s “Division”. Write 1234,1245 without any space and leave all other rows empty for other users. Then just upload the excel file in Quicksight and then apply it as RLS on the actual dataset.

3

It seems there was a misunderstanding regarding my original request. Let me clarify: if a user belongs to a division and the main dataset contains a divisions column with multiple values, we need to show the row where the user is part of any of the division values listed in that column. Essentially, we’re looking to filter the rows in the dataset based on whether the user is associated with any division included in the multiples present in the main dataset.

4

Essentially, we’re looking to filter the rows in the dataset based on whether the user is associated with any division included in the multiples present in the main dataset.

You would need to exactly define that specific value for that user . Your current example passing 1234 for abc will only bring 1 record back in QuickSight RLS.

Kind regards,
Koushik

5

Correct, Currently I am getting only 1 record if I enable the RLS.

Divisions sales
1234 200
but I want to show both records where this division id is present.

Divisions Sales
1234,1245 100
1234 200

Is anyone know how to do that in quicksight.

6

@achourey ,

This is not possible at the moment. You would need to define the user rule for each unique value in the RLS dataset .

Kind regards,
Koushik