QuickSight now supports subfolders in restricted folders to enable governed data sharing

Posted on: Oct 17, 2024

Amazon QuickSight now supports subfolders in restricted folders for asset organization and permissions management. QuickSight assets created in restricted folders and subfolders cannot be removed from the folder tree, creating a data sharing boundary. Enterprise administrators can deploy restricted folders and subfolders to govern sharing of data in business intelligence assets across their organization. With this launch, users with the folder Contributor permission can create content in restricted folders and subfolders but cannot manage permissions on folders and assets contained in the restricted folder. Additionally, administrators can now use the QuickSight RestoreAnalysis API to restore deleted analyses into a restricted folder.

Users with the Contributor permission can create content in restricted folders and subfolders. Administrators can set Viewer and Contributor permissions for users and groups on folders and subfolders. This enables a subset of content to be shared with specific users. For example, data sources can be created in a restricted subfolder with Viewer permissions for analysts. They can use these data sources to create Datasets, Topics and Analyses in another subfolder where they have Contributor permissions. Dashboards can be published in another subfolder where a broader audience of business users have the Viewer permission.

Restricted folder subfolders and the RestoreAnalysis to folder API are available in all AWS Regions where Amazon QuickSight is available.

To learn more, see Organizing assets into folders for Amazon QuickSight.