Exercises

This module builds on top of dataset and dashboard created in Build your first dashboard module.

Exercise 1 – Create RLS dataset

  1. Download sample RLS rules
  2. Replace with your current user arn.
    UserArn format is arn:aws:quicksight:<IdentityRegion>:<AccountNumber>:user/<Namespace>/<UserName>
    How do I find my Identity Region and Account number? Expand this section for instructions.
  3. From Datasets view, click New dataset button.
  4. Choose Upload a file option, select the modified excel from local and click Open.
  5. Select Sheet1 and click Edit/Preview data button.
  6. Click Save & publish / Save button. (If taken out of dataset edit view, skip next step.)
  7. Click QuickSight icon to exit dataset edit mode.
AuthorWorkshop-Module6-Exercise

Exercise 2 – Create a QuickSight reader

  1. Click Username from top right of the screen.
  2. Click Manage QuickSight from the drop down.
  3. Search for CLS-Test-Reader. If user exists (someone else has created the user in your QuickSight instance already), skip following steps and move to Exercise 3.
  4. Click Invite users button.
  5. In the email address box, paste CLS-Test-Reader and click + icon.
  6. Enter your email in the Email box and click Invite button.
  7. Click X to close the pop up and click QuickSight icon to exit management panel.
AuthorWorkshop-Module6-Exercise

Exercise 3 – Check SaaS-Sales Analysis

  1. From Analyses view, open SaaS-Sales Analysis (created in Build your first dashboard module)
  2. Check the Segment drop down control. Note that there are three values - Enterprise, SMB and Strategic.
  3. Scroll down and check the Regional Details pivot table. Note that it has data for AMER, APJ and EMEA regions.
  4. Check the Sales by Industry donut chart. Note that it is using Industry column
  5. Click on QuickSight icon to exit analysis mode.
AuthorWorkshop-Module6-Exercise

Exercise 4 – Apply Row Level Security

  1. From Datasets view, click on SaaS-Sales dataset.
  2. Click Row-level security button.
  3. Click User-based rules section to expand it.
  4. Select SaaS-Sales-RLS dataset and click Apply dataset button.
  5. In the confirmation screen, click Apply and activate button.
    Note that SaaS-Sales-RLS is now shown under Selected dataset rules.
  6. Click Back to datasets link to exit RLS setup screen.
AuthorWorkshop-Module6-Exercise

Exercise 5 – Apply Column Level Security

  1. From Datasets view, click on SaaS-Sales dataset.
  2. Click Column-level security button from dataset menu.
  3. Select Industry column and click Next button.
  4. Search and select CLS-Test-Reader.
  5. Click Apply button.
  6. Click Back to datasets link to exit CLS configuration screen.
AuthorWorkshop-Module6-Exercise

Exercise 6 – Check SaaS-Sales Analysis

  1. From Analyses view, open SaaS-Sales Analysis.
  2. Check the Segment drop down control. Note that there only two values are displayed now - Enterprise and Strategic. (You no longer have rights to see SMB data per the RLS rules we applied)
  3. Scroll down and check the Regional Details pivot table. Note that it also has only two values now - AMER and EMEA. (You no longer have rights to see APJ data per RLS rules we applied)
  4. Check the Sales by Industry donut chart. It is not displayed as we set CLS rules to allow only CLS-Test-Reader to access Industry field.
  5. Click on QuickSight icon to exit analysis mode.
AuthorWorkshop-Module6-Exercise

Exercise 7 – Remove Row-level security

  1. From Datasets view, click on SaaS-Sales dataset.
  2. Click Row-level security button.
  3. Optional - To temporarily turn off RLS - click the slider against User-based rules, type confirm in the confirmation dialog and click Turn off button.
    RLS is no longer applied to the base dataset at this stage. However, the rules dataset association is still intact. So, if desired, you can reactivate RLS by clicking the slider control again.
  4. To fully remove RLS rules dataset - Click on User-based rules section to expand it and click Remove dataset button.
  5. In confirmation screen, click Remove dataset button again.
  6. Click Back to datasets link to exit RLS setup screen.
AuthorWorkshop-Module6-Exercise

Exercise 8 – Remove Column-level security

  1. From Datasets view, click on SaaS-Sales dataset.
  2. Click Column-level security button from dataset menu.
  3. Select Industry column and click Next button.
  4. Click x against CLS-Test-Reader.
  5. Click Apply button.
  6. Click Back to datasets to exit CLS configuration screen.
AuthorWorkshop-Module6-Exercise