AWS › Amazon QuickSight & Business Intelligence

How does QuickSight support row level security to control what data different users can see?

Intermediate

Answer

QuickSight row level security lets you define rules, typically stored in a dataset, that restrict which rows of data a specific user or group can see within a shared dashboard, meaning you can build a single dashboard used by an entire sales organization where each regional manager automatically only sees data relevant to their own specific region.

// Row level security rule dataset example
// Username, Region
// manager1, US-East
// manager2, US-West

Real-world example A national retail chain builds one shared sales dashboard, but thanks to row level security, a manager in the western region only ever sees sales figures for western stores, while a manager in the eastern region only sees eastern figures.

Common follow-ups: How is row level security different from simply creating separate dashboards for each group?;Can row level security be based on group membership instead of individual usernames?

IAM;AWS Organizations & Multi Account Strategy