# Why can't I edit CID DataSets **URL:** \ **Category:** Q&A\ **Tags:** data-source, error, dataset, Business-Intelligence-Engineer, quick-sight\ **Created:** [October 17, 2023, 8:10pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046 "2023-10-17T20:10:52Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![Brian\_P\_Schwind](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/brian_p_schwind/32/13943_2.png) [@Brian\_P\_Schwind](https://community.amazonquick.com/u/Brian_P_Schwind)\ **Post date:** [October 17, 2023, 8:10pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/1 "2023-10-17T20:10:52Z")
I recently installed the CID dashboards in our environment. The Datasets are refreshing and the dashboards are showing the data properly. I made the change to add a tag to the summary\_view view in Athena based on this video… [https://youtu.be/Yc64XsDo30M?si=kwflEDoxdfte8Zvj](https://youtu.be/Yc64XsDo30M?si=kwflEDoxdfte8Zvj) However I am NOT able to edit or view the summary\_view DataSet in Quick Sight. FIrst few times I got an Access Denied error for athena:ListDatabases. THe QuickSIght Role specifically gives the role the athena:ListDatabases to the cid\_cur databases. Now I am getting a different error saying “Can’t perform this action Query table not found. Verify the table in the dataset or custom SQL and try again.” Which is garbage since I can clearly see the table in Athena and the dashboards are displaying the data. I cannot verify the table in the dataset because it won’t display it. Anyone know what is going on here and how to fix this? Brian ---
**Author:** ![Brian\_P\_Schwind](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/brian_p_schwind/32/13943_2.png) [@Brian\_P\_Schwind](https://community.amazonquick.com/u/Brian_P_Schwind)\ **Post date:** [October 17, 2023, 9:09pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/2 "2023-10-17T21:09:53Z")
So I decided to delete the CFN Stack and redeploy again. First off is the QuickSIghtRole does not even include the CID Bucket in the S3 policy so right off the bat the Datasets fail to refresh. I had to manaully add the CID bucket to the policy. THe only bucket it listed was the CostOptimization bucket. However I still cannot edit of preview any data in the CID Quick Sight data sets. I get these messages… Can’t perform this action You don’t have sufficient permissions to connect to this dataset or run this query. Contact your administrator for assistance. Error details | region: | us-east-1 | | --- | --- | | timestamp: | 1697576968294 | | requestId: | 42410e65-ceee-4951-8f21-812b9ead7dca | | sourceErrorCode: | 100071 | | sourceErrorMessage: | [Simba]AthenaJDBC An error has been thrown from the AWS Athena client. You are not authorized to perform: athena:ListDatabases on the resource. After your AWS administrator or you have updated your permissions, please try again. [Execution ID not available] | | sourceErrorState: | HY000 | | sourceException: | java.sql.SQLException | | sourceType: | ATHENA | ---
**Author:** ![Wakana](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/wakana/32/3520_2.png) [@Wakana](https://community.amazonquick.com/u/Wakana)\ **Post date:** [October 19, 2023, 12:07am UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/3 "2023-10-19T00:07:31Z")
hi @Brian_P_Schwind would you be able to confirm if Quick SightRole has Athena access permitted from QS Management console? ![image](https://d1wl4jav5dp96l.cloudfront.net/original/2X/6/65be99d6b8382337fbe40685da813f1848ce4fec.jpeg) kind regards, Wakana ---
**Author:** ![Brian\_P\_Schwind](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/brian_p_schwind/32/13943_2.png) [@Brian\_P\_Schwind](https://community.amazonquick.com/u/Brian_P_Schwind)\ **Post date:** [October 19, 2023, 3:41pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/4 "2023-10-19T15:41:41Z")
Sure can… ![image](https://d1wl4jav5dp96l.cloudfront.net/original/2X/a/a77afd4dd56df99f3907d493482fd04ddef68c5a.png) ALso here is the policy on the CidQuick SightDataSourceRole role… { “Version”: “2012-10-17”, “Statement”: [ { “Action”: [ “athena:ListDataCatalogs” ], “Resource”: “_", “Effect”: “Allow” }, { “Action”: [ “athena:ListDatabases” ], “Resource”: [ "arn:aws:athena:us-east-1:1__**2:database/cid\_cur" ], “Effect”: “Allow” }, { “Action”: [ “glue:GetDatabases” ], “Resource”: [ "arn:aws:glue:us-east-1:1**__2:catalog" ], “Effect”: “Allow” }, { “Action”: [ “glue:GetTable”, “glue:GetPartitions” ], “Resource”: [ "arn:aws:glue:us-east-1:1__**2:catalog", "arn:aws:glue:us-east-1:1**__2:database/cid\_cur", "arn:aws:glue:us-east-1:1_**_2:table/cid\_cur/_" ], “Effect”: “Allow” }, { “Action”: [ “athena:GetQueryExecution”, “athena:StartQueryExecution”, “athena:GetQueryResultsStream”, “athena:GetQueryResults” ], “Resource”: "arn:aws:athena:us-east-1:1 **** 2:workgroup/CID", “Effect”: “Allow” }, { “Action”: [ “s3:GetBucketLocation”, “s3:ListBucket” ], “Resource”: "arn:aws:s3:::aws-athena-query-results-cid-1 **** 2-us-east-1", “Effect”: “Allow” }, { “Action”: [ “s3:GetObject”, “s3:PutObject” ], “Resource”: "arn:aws:s3:::aws-athena-query-results-cid-1**_2-us-east-1/", “Effect”: “Allow” }, { “Action”: [ “lakeformation:GetDataAccess” ], “Resource”: "_”, “Effect”: “Allow” } ] } ---
**Author:** ![WLS-DM](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/wls-dm/32/36109_2.png) [@WLS-DM](https://community.amazonquick.com/u/WLS-DM)\ **Post date:** [December 11, 2023, 7:50pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/5 "2023-12-11T19:50:36Z")
Hello @Brian_P_Schwind, is this an issue you are still facing in Quick Sight? When you go to create a dataset from the Athena source you mentioned, are you attempting to import a table/view directly, or are you using SQL to query the Athena view and build out your dataset manually? Otherwise, if you were able to find a solution, do you mind replying with the steps you took to correct this? ---
**Author:** ![Brian\_P\_Schwind](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/brian_p_schwind/32/13943_2.png) [@Brian\_P\_Schwind](https://community.amazonquick.com/u/Brian_P_Schwind)\ **Post date:** [December 11, 2023, 9:41pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/6 "2023-12-11T21:41:37Z")
Well…I had opened an AWS Support Case(we have enterprise support agreement) for this and AWS still could not find a resolution to this issue. ☹ I finally gave up and gave the role we were using full admin(allow, _:_) privs. That allowed me to do what I needed to do granted it is not the most secure way. My thought was I would cirlce back someday and try to figure which actions it was missing. AWS wasn’t able to figure it out though LOL! Brian ---
**Author:** ![WLS-DM](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/wls-dm/32/36109_2.png) [@WLS-DM](https://community.amazonquick.com/u/WLS-DM)\ **Post date:** [December 12, 2023, 4:02pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/7 "2023-12-12T16:02:21Z")
Hello @Brian_P_Schwind, I completely understand the hesitancy to want to use full admin privileges. I have looked through the policy that you posted above and also cannot find what is missing. For now, I will mark this ticket as a bug since you have already communicated with AWS support and archive this topic. I will research this a bit further and see if I can find any information. If I have any luck finding a solution, I will message you directly so we can get this resolved. Thank you for your patience and I am glad you at least found a work-around for the time being. ---
**Author:** ![WLS-DM](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/wls-dm/32/36109_2.png) [@WLS-DM](https://community.amazonquick.com/u/WLS-DM)\ **Post date:** [December 12, 2023, 4:02pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/8 "2023-12-12T16:02:49Z")
---
**Author:** ![WLS-DM](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/wls-dm/32/36109_2.png) [@WLS-DM](https://community.amazonquick.com/u/WLS-DM)\ **Post date:** [December 12, 2023, 4:43pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/9 "2023-12-12T16:43:00Z")
---
**Author:** ![WLS-DM](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/wls-dm/32/36109_2.png) [@WLS-DM](https://community.amazonquick.com/u/WLS-DM)\ **Post date:** [December 12, 2023, 4:47pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/10 "2023-12-12T16:47:02Z")
Hello @Brian_P_Schwind, I was able to figure out the problem and I think this could be helpful for other users so I am going to post my response here instead. In this section of your policy: ```auto { “Action”: [ “athena:ListDatabases” ], “Resource”: [ "arn:aws:athena:us-east-1:12:database/cid_cur" ], “Effect”: “Allow” }, ``` You are using the action ListDatabases but only given access to a single database so it is throwing an error. You need to give access to all databases here in the Resource section so that it will run without Full Admin Allow Privileges. That should give you the solution you are looking for. ---
**Author:** ![Brian\_P\_Schwind](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/brian_p_schwind/32/13943_2.png) [@Brian\_P\_Schwind](https://community.amazonquick.com/u/Brian_P_Schwind)\ **Post date:** [December 12, 2023, 4:51pm UTC](https://community.amazonquick.com/t/why-cant-i-edit-cid-datasets/20046/11 "2023-12-12T16:51:05Z")
> [@WLS-DM](#): > > but only given access to a single Awesome…thanks a bunch!