Organizing Assets into Folders for Amazon QuickSight - Amazon QuickSight

Organizing Assets into Folders for Amazon QuickSight

 Applies to: Enterprise Edition 

In Amazon QuickSight Enterprise edition, your team members can create personal and shared folders to add hierarchical structure to QuickSight asset management. Using folders, people can more easily organize, navigate through, and discover dashboards, analyses, and datasets. Within a folder, you can still use your usual tools to search for assets or to add assets to your favorites list.

You can use the following types of folders with QuickSight:

  • Personal folders to organize work for yourself.

    Personal folders are visible only to the person who owns them. You can't transfer ownership of personal folders to anyone else.

  • Shared folders to organize work and simplify sharing among multiple people.

    Shared folders are visible to people who have access to them. To manage shared folders, you need to be a QuickSight administrator. You can transfer ownership of shared folders if you are already an owner.

Overview of QuickSight Folders

You can do the following with personal folders:

  • Create subfolders.

  • Rearrange folders or move one folder into another.

  • Add assets to your folder, including datasets, analyses, and dashboards. To add assets to a personal folder, you need to already have access to the assets. Multiple assets can have the same name.

You can do the following with shared folders:

  • Share these folders with other users in the same AWS account.

  • People who have QuickSight admin privileges can do the following:

    • Create or delete a shared folder and subfolders inside of it. You can move either of these around within the top-level folder.

    • Add or remove owners and viewers. When you make a person an owner of the folder, you give them ownership of every asset in the folder.

Security for Shared Folders

The following rules apply to security for shared folders:

  • To create a shared folder and to share the folder with one or more groups, you must be an Amazon QuickSight administrator.

  • Shared folders have two access levels, owners and viewers:

    • The folder owner owns everything (folders, analyses, dashboards, datasets) inside of the folder.

    • The folder viewer can only use the assets (folders, dashboards, datasets) in the folder. A viewer can't edit or share those assets.

  • QuickSight readers' sharing status for a folder gets shared with the folder. However, a reader gets only read access to folders, and only dashboard access to visuals.

  • AWS security is enforced on every object within a folder. The folder applies the same type of security to the assets of whoever the folder is shared with according to their access level (admin, author, or reader).

  • The top-level folder is the root folder of any subfolders. When a subfolder is shared at any level, the person whom the folder was shared with sees the root folder in the top-level folders view.

  • The folder permission is the permission on the current folder, combined with permissions of all the folders leading to the root folder.

  • Items in the shared folder can be shared or private:

    • A shared asset inherits its permission from the folder. A shared asset is created when an asset that belongs to the folder owner is added to a shared folder.

    • A private asset opts out of the permission inheritance. A private asset is created when an asset is added to a shared folder, and this asset can be viewed by but doesn't belong to the folder owner.

Limitations

The following limitations apply to folders:

  • Folders can't be shared with people in other AWS accounts.

  • For people who have QuickSight reader permissions, the following limitations apply:

    • Readers can't own a personal or shared folder.

    • Readers can't create or manage folders or folder content.

    • In shared folders, readers can only see dashboard assets.

In addition, these limitations apply to shared folders:

  • The name of a shared folder (at the top level of the tree) must be unique in your AWS account.

  • In a single folder, multiple assets can't have the same name. For example, in your top-level folder, you can't create two subfolders with the same name. In the same folder, you can't add two assets with the same name, even if they have different asset IDs. The path to each asset behaves like an Amazon S3 key name. It must be unique in your AWS account.

For Amazon QuickSight quotas, the Service Quotas console provides the most accurate and up-to-date information.

You can do the following in the Service Quotas console: