Administrator configuration - Amazon Quick
Enable upgradesCustom permissions - SSO/ADCustom permissions - QS managedApply profiles

Administrator configuration

 Applies to: Enterprise Edition 
   Intended audience: System administrators and Amazon Quick administrators 

As a Amazon Quick administrator, you can configure various settings for user-driven license upgrades, including enabling the feature, setting approval policies, and configuring custom permissions profiles.

Enabling user-driven upgrades

Before users can request license upgrades, you must enable the user-driven upgrade feature in your Amazon Quick account settings.

Access Administrator Settings

  • Log in to your Amazon Quick administrator account

  • Navigate to the 'Manage Account' section of the console

  • Check for User upgrades Section

  • Use the toggle button to Enable/Disable - Automatically approve upgrades

Configuring approval settings

Administrators can configure three types of upgrade governance:

  • Turned off altogether — Users cannot request upgrades

  • Admin Approval (default for IAM Identity Center and AD) — Users can request upgrades that require administrator approval

  • User Driven Upgrades (default for IdP) — Users can upgrade automatically without approval

Creating a custom permissions profile for Amazon Quick account that is integrated with IAM Identity Center or Active Directory

Amazon Quick account administrators can use the following procedure to create a custom permissions profile for an Amazon Quick account that is integrated with IAM Identity Center or Active Directory.

To create a custom permissions profile for an Amazon Quick account that is integrated with IAM Identity Center or Active Directory

  1. Sign in to the AWS Management Console.

  2. Open Amazon Quick.

  3. The Amazon Quick Admin console opens. Choose Custom Permissions.

  4. The Manage custom permissions page opens. Choose one of the following options.

  5. To create a new custom permissions profile, choose Create.

  6. To edit or view an existing custom permissions profile, choose the ellipses (three dots) next to the profile that you want, and then choose Edit.

  7. If you want to create or update a custom permissions profile, make selections for the following items.

  8. For Name, enter a name for the custom permissions profile.

  9. For Restrictions, choose "Allow users to upgrade or request upgrades" under "User Upgrades". Choose any other options that you want to deny. Any option that you don't choose is allowed.

  10. Choose Create or Update to confirm your choices. To go back without making any changes, choose Back.

  11. Once you are done making changes, record the name of the custom permissions profile. Provide the name of the custom permissions profile to API users so that they can apply the custom permissions profile to roles or users.

Creating a custom permissions profile for an Amazon Quick account that uses Amazon Quick managed users

Amazon Quick account administrators can use the following procedure to create a custom permissions profile for an Amazon Quick account that uses Amazon Quick managed users.

To create a custom permissions profile for Amazon Quick managed users

  1. Open the Amazon Quick console.

  2. From any page in the Amazon Quick console, choose Manage Amazon Quick at the top right corner.

  3. Only Amazon Quick administrators have access to the Manage Amazon Quick menu option. If you don't have access to the Manage Amazon Quick menu, contact your Amazon Quick administrator for assistance.

  4. Choose Custom permissions. You can also choose the Manage users section and then choose Manage custom permissions.

  5. The Manage custom permissions page opens. Choose one of the following options.

  6. To create a new custom permissions profile, choose Create.

  7. To edit or view an existing custom permissions profile, choose the ellipses (three dots) next to the profile that you want, and then choose Edit.

  8. If you want to create or update a custom permissions profile, make selections for the following items.

  9. For Name, enter a name for the custom permissions profile.

  10. For Restrictions, choose "Allow users to upgrade or request upgrades" under "User Upgrades". Choose any other options that you want to deny. Any option that you don't choose is allowed.

  11. Choose Create or Update to confirm your choices. To go back without making any changes, choose Back.

  12. Once you are done making changes, record the name of the custom permissions profile. Provide the name of the custom permissions profile to API users so that they can apply the custom permissions profile to roles or users.

Applying custom permissions profiles

Apply a custom permissions profile to an Amazon Quick role with the Amazon Quick API

For more information, see Apply custom permissions profile to role.

Apply a custom permissions profile to a user with the Amazon Quick API

For more information, see Apply custom permissions profile to user.

Apply a custom permissions profile to an account

For more information, see Apply custom permissions profile to account.

Apply a custom permissions profile to an account using the Amazon Quick APIs

For more information, see Apply custom permissions profile using APIs.