Set up row-level security

[radhkan]

I have created a new dataset using custom sql from original Amazon data lake tables. Now i want to set up row-level security which doesn’t show in the Set up row-level security. “No rules datasets available at present. To setup RLS, create a new rules dataset or duplicate an existing dataset as a rules dataset”. I tried to duplicate the same dataset, but its not working.
Can anyone suggest how to enable RLS.

[harpson]

Hi @radhkan , Thanks for your question & Welcome to the community.

This is a new feature, have a look at this blog:

Action Required: Amazon QuickSight Introduces Rules Datasets Flag for Row Level Security (RLS) Datasets

Action Required: Amazon QuickSight Introduces Rules Datasets Flag for Row Level Security (RLS) Datasets Summary: On March 31st 2025, Amazon QuickSight launched a new feature that distinguishes between regular datasets and Rules datasets used for Row Level Security (RLS). This distinction for Rules dataset has been automatically flagged (both console and API) for RLS datasets applied to regular datasets before March 31 2025. This change requires action from dataset authors and admins when dealin…

Creation of New Rules Datasets:
Console: Select the new ‘NEW RULES DATASET’ option under NEW DATASET

When you duplicate your dataset make sure to select NEW RULES DATASET option.

Hope this helps.
I am marking this reply as, “Solution,” but let us know if this is not resolved. Thanks for posting your questions on the QuickSight Community!

[radhkan]

Thanks…sorry i am new and exploring more in quicksight, i have created a custom sql from the existing data source > schema > tables. How can I define the rule dataset, when i click Save and Publish, i get the message “We can’t find a key column in this permissions dataset. Key columns must use either names (UserName, GroupName) or ARNs (UserArn, GroupArn)”
Do i need to define something in the custom SQL

[Giridhar.Prabhu]

Hi @radhkan

The row-level security dataset can be setup on an individual user basis or on a user group basis. Depending on how you want to implement you can either have UserName, GroupName or Both in your row-level-security dataset. The names have to be named exactly as documented here as they are key to how QuickSight does the match with User and Group names. Additionally you will include field(s) from your dataset that you want to use to restrict data access. Again the field name should match with the field name in your dataset.

As you see in the below documentation Region, Segment etc are fields in the dataset and you are trying to setup to which of those the user/group have access to.

When you are creating this dataset you should now use the New Rules Dataset option in the dropdown for New Dataset.

Using row-level security with user-based rules to restrict access to a dataset...

Hope this helps.

Regards,
Giri