Row Level Security

Question & Answer
, , ,
1

Hi, I’m trying to achieve row level security with employee data, I followed below article and flattened my hierarchical data and joined it with my dataset. I created a permissions file (csv) using the mentioned code snippet and applied it to my dataset. But now the data is restricted to everyone even the employees who are supposed to access it. Does anyone have any suggestions ?

2

What field are you using for the name and can you provide an example of a value?

For instance if you are using UserARN does it match this format?

arn:aws:quicksight:us-east-1:123456789012:user/default/Bob

Also, can you confirm that they are the correct values (UserNames are correct).

You can use this to get a list of your users

https://docs.aws.amazon.com/cli/latest/reference/quicksight/list-users.html

You can list groups here

https://docs.aws.amazon.com/cli/latest/reference/quicksight/list-groups.html

3

Hi Max,

I’m using username and here is the sample RLS dataset I’m using

image

4

Are these the exact column names?

The username column needs to be UserName

5

Hi @Nitya_Goriparthi!
Were you able to get RLS working on your dataset? If not, could you provide more details?

Thanks!
Kellie

6

Hi Kellie,Max, I was able to make RLS work. I just had to make the username field in lower case, it was in upper case previously.

7

Thats great. I’ll mark this as solved. Thanks.

8

Hey team, I am below error when i try to upload my csv.

Dataset rules contain column(s) with unsupported data types:
[ Dept_id ]
. Error code: DatasetRulesInvalidColType

and below my csv for permissions dataset.

image

Can anyone tell me what’s the error here ?

9

Hi @Karan_Shah,

You have to change the Dept_id field in your permissions dataset to a text field.

10

Thank you. Worked - i had to change the dept_id to string when i upload the permissions data.