# Row Level Security

Agent Bill for Amazon Q in Quicksight was built considering the challenge for Row Level Security.  Each Role has their Athena Queries, QuickSight Datasets, and QuickSight Topics. 

The Dataset are configured with User-based rules leveraging FinOps Center User table for Financial Scope. Users Scope is updated when the Dataset's SPICE is Refreshed. 

<figure><img src="https://988932576-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXbqCrcU65ULbgldtjmvZ%2Fuploads%2Ff3d8TxBKFO6nHZX8l20U%2Fimage.png?alt=media&#x26;token=61f6b68b-4b94-4cb9-9553-7c36414fb930" alt=""><figcaption></figcaption></figure>

Users see their Data in Scope of their Users Allocation of Accounts and Financial Budgets configured in FinOps Center.&#x20;

In image below, FinOps Center users Products on the left are what are reflected in Embedded Amazon Q.&#x20;

<figure><img src="https://988932576-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXbqCrcU65ULbgldtjmvZ%2Fuploads%2F5NnOOuPtoiHD4y15YTjV%2Fimage.png?alt=media&#x26;token=02f0e7c2-4a3b-4c5b-a161-af6d07ce2d2d" alt=""><figcaption></figcaption></figure>