Each sales representative should see only the sales for their region.
Share one dashboard without exposing rows from another region.
Which approach is most appropriate?
Configure QuickSight row-level security with user or group rules and validate both SPICE and direct-query behavior.
Detailed explanation
A label is not an authorization rule and does not hide rows.
A label is not an authorization rule and does not hide rows.
User or group attributes can filter the rows returned from the shared dataset.
User or group attributes can filter the rows returned from the shared dataset.
Deleting source data violates shared use and loses the original records.
Deleting source data violates shared use and loses the original records.
Audit-log permissions do not filter dashboard rows.
Audit-log permissions do not filter dashboard rows.
Check official documentation
Compare the following points with the official documentation.
Amazon QuickSight row-level security、user rules、groupsの公式説明を確認する。
What to confirm
表示ラベルと実際の行認可を区別できる。
Key points
- Row-level security
- User rule
- Group
- Data isolation
Notes
- Environment: AWS公式DEA-C01試験ガイドと各サービスの公式ドキュメントの確認
- Confirm current AWS service behavior in the official DEA-C01 documentation.
Foundation review
Least privilege
Dataset, analysis, dashboard, and row permissions should be evaluated separately.
Verification
Test representative users, multiple regions, and empty or overlapping rules.