Exercises

This module builds on top of dataset and dashboard created in Build your first dashboard module.

Exercise 1 – Create RLS dataset

  1. Download sample RLS rules
  2. Replace with your current user arn.
    UserArn format is arn:aws:quicksight:<IdentityRegion>:<AccountNumber>:user/<Namespace>/<UserName>
    How do I find my Identity Region and Account number? Scroll to bottom of this page for details.
  3. From Datasets view, click New dataset button.
  4. Choose Upload a file option, select the modified excel from local and click Open.
  5. Select Sheet1 and click Edit/Preview data button.
  6. Click Save & publish / Save button.
  7. Click QuickSight icon to exit dataset edit mode.
AuthorWorkshop-Module6-Exercise

Exercise 2 – Create a QuickSight reader

  1. Click Username from top right of the screen.
  2. Click Manage QuickSight from the drop down.
  3. Search for CLS-Test-Reader. If user exists (someone else has created the user in your QuickSight instance already), skip following steps and move to Exercise 3.
  4. Click Invite users button.
  5. In the email address box, paste CLS-Test-Reader and click + icon.
  6. Enter your email in the Email box and click Invite button.
  7. Click X to close the pop up and click QuickSight icon to exit management panel.
AuthorWorkshop-Module6-Exercise

Exercise 3 – Check SaaS-Sales Analysis

  1. From Analyses view, open SaaS-Sales Analysis (created in Build your first dashboard module)
  2. Check the Segment drop down control. Note that there are three values - Enterprise, SMB and Strategic.
  3. Scroll down and check the Regional Details pivot table. Note that it has data for AMER, APJ and EMEA regions.
  4. Check the Sales by Industry donut chart. Note that it is using Industry column
  5. Click on QuickSight icon to exit analysis mode.
AuthorWorkshop-Module6-Exercise

Exercise 4 – Apply Row Level Security

  1. From Datasets view, click on SaaS-Sales dataset.
  2. Click Row-level security button.
  3. Select SaaS-Sales-RLS dataset and click Apply dataset button.
  4. In confirmation screen, click Apply dataset button again.
  5. Click X to close Configure row-level security screen.
AuthorWorkshop-Module6-Exercise

Exercise 5 – Apply Column Level Security

  1. From Dataset menu, click Column-level security button.
  2. Select Industry column and click Next button.
  3. Search and select CLS-Test-Reader.
  4. Click Apply button.
  5. Click Back to datasets to exit CLS configuration screen.
AuthorWorkshop-Module6-Exercise

Exercise 6 – Check SaaS-Sales Analysis

  1. From Analyses view, open SaaS-Sales Analysis.
  2. Check the Segment drop down control. Note that there only two values are displayed now - Enterprise and Strategic. (You no longer high rights to see SMB data per the RLS rules we applied)
  3. Scroll down and check the Regional Details pivot table. Note that it also has only two values now - AMER and EMEA. (You no longer have rights to see APJ data per RLS rules we applied)
  4. Check the Sales by Industry donut chart. It is not displayed as we set CLS rules to allow only CLS-Test-Reader to access Industry field.
  5. Click on QuickSight icon to exit analysis mode.
AuthorWorkshop-Module6-Exercise

Exercise 7 – Remove Row-level security

  1. From Datasets view, click on SaaS-Sales dataset.
  2. Click Row-level security button.
  3. Click Remove dataset button.
  4. In confirmation screen, click Remove dataset button again.
  5. Click X to close Configure row-level security screen.
AuthorWorkshop-Module6-Exercise

Exercise 8 – Remove Column-level security

  1. From Dataset menu, click Column-level security button.
  2. Select Industry column and click Next button.
  3. Click x against CLS-Test-Reader.
  4. Click Apply button.
  5. Click Back to datasets to exit CLS configuration screen.
AuthorWorkshop-Module6-Exercise

How do I find my IdentityRegion?
IdentityRegion is the region where users and groups are managed for your QuickSight account. If you have CLI/API acccess, do a list-users call and check the region specified in user arn. Else, do the following.

  1. Click Username from top right of the screen.
  2. Click Manage QuickSight from the drop down.
  3. Click on the account info section.
  4. Copy Account number from the pop up screen and click the Close button.
  5. Click Security & permissions from left panel.
  6. If the section loads correctly, the region from the page url is your identity region; Skip following steps.
  7. If you get a message stating Switch to to edit permissions or unsubscribe, click Username from top right and change region to one specified in message.
  8. Once page loads for new region, the region as specified in the new page url is your identity region.
AuthorWorkshop-Module6-Exercise