When using custom permission, can I share dataset to authors but only with read-only permission

My use case is that

  • There are several users with Author role
  • They should not be able to update/delete/create on QS but must be able to view Dataset, Analysis, Dashboard

I’m trying to do this using custom-permission but noticed that I can’t give ‘READ-ONLY’ permission. As soon as I block dataset, the Author won’t be able to view dataset’s content.

For Analysis, it sounds weird to have ‘READ-ONLY’ access. But, I only can give ‘Co-Owner’ permission to the author. That’s only available option.

How can I achieve my requirements?

Hi @tbdori

As of today there is no custom permission for authors to a. not be able to create datasets and b. be able to view them.

Can you help me understand this user persona, why they cant create their own datasets but you want them to VIEW other datasets they have access to?

To achieve something similar some customers do the below.

Use folders (shared or restricted) and share assets with the author as viewer. They will not be able to modify the dataset. BUT they can create new datasets from it or create new datasets with no permissions in their personal space.

thank you for being a member of the QuickSight community!!

Ramon Lopez

Can you help me understand this user persona, why they cant create their own datasets but you want them to VIEW other datasets they have access to?

The persona is QA engineer. I want to give them only read-only but with access. Current READER role won’t support it. I see it can see dashboards, but it doesn’t allow to access Dataset(where the SQL is shown) and Analysis(where calculated fields are defined).

So, I was checking if Author role can provide these. Since author role has more access than needed, I want them to access Dataset and Analysis with READ-ONLY.
Please note that they won’t create their own dataset/analysis at all. They just need to validate in detail when there is/are any error.

I believe Folder with view permission won’t provide this ‘access but read-only’ either.

Thats correct. At the moment this is not possible.

Please share with me via private message the name of your company and i can add this as a product feature request.

Thank you!
Ramon Lopez

1 Like