How to use RLS (Row-Level Security) with Quicksight which is integrated with Okta for SSO

0

Is it possible to enable row-level security in the quicksight datasets and give access to a IAM role when the dashboards are integrated with Okta for SSO

1 Answer
2
Accepted Answer

Amazon QuickSight does not directly support row-level security (RLS) within datasets. However, you can implement some workarounds to achieve similar functionality.

One approach is to pre-filter the data within your datasets based on the IAM role or user permissions. You would need to create different datasets for different user groups, each containing only the rows of data that users in that group should have access to. This approach requires careful data modeling and management to ensure data security and consistency.

Regarding integration with Okta for Single Sign-On (SSO), QuickSight supports various SSO providers, including Okta. When users sign in through Okta, QuickSight can authenticate them and apply the permissions defined in QuickSight based on their IAM roles or groups. However, this authentication mechanism does not directly affect row-level security within datasets.

To summarize, while QuickSight does not have native support for row-level security at the dataset level, you can implement data filtering based on IAM roles or groups. Integration with Okta for SSO is possible and can help manage user access to QuickSight dashboards and resources.

You can check this out too :- https://docs.aws.amazon.com/quicksight/latest/user/restrict-access-to-a-data-set-using-row-level-security.html

from the above link

Row-level security works only for fields containing textual data (string, char, varchar, and so on). It doesn't currently work for dates or numeric fields. Anomaly detection is not supported for datasets that use row-level security (RLS).

Hope it clarifies and if does I would appreciate answer to be accepted so that community can benefit for clarity, thanks ;)

profile picture
EXPERT
answered 18 days ago
profile picture
EXPERT
reviewed 18 days ago
profile pictureAWS
EXPERT
reviewed 18 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions