Question

A data engineering team publishes a single QuickSight dashboard built on an Athena-backed SPICE dataset containing regional sales data for all countries. Regional sales managers should each see only the rows for the country they manage, while the global director should see all rows. The team wants to enforce this without creating a separate dashboard or dataset per region. What is the most appropriate way to meet this requirement?

Accepted Answer

Create a row-level security (RLS) rules dataset that maps QuickSight user names to allowed country values and apply it to the sales dataset.

Answer

Duplicate the dashboard for each region and share each copy only with the relevant regional manager.

Answer

Use column-level security to hide the country column from the regional managers.

Answer

Create separate Athena views filtered by country and point a distinct QuickSight dataset at each view.