# IAM policy assignments
<a name="iam-policy-assignments"></a>

IAM policy assignments allow you to control access to AWS resources for users and groups within Amazon Quick. By assigning IAM policies, you can define and manage permissions for various AWS services and resources that Quick may need to access. Assignments can be enabled, disabled, or deleted at any time.

**To add a new IAM policy assignment:**

1. Open the [Quick console](https://quicksight.aws.amazon.com/).

1. Choose the user icon at the top right, and then choose **Manage Quick**.

1. Under the **Permissions** section, choose **IAM policy assignments**.

1. Choose **Add new assignment**.

1. Enter a name for this assignment and choose **Next**.

1. Select an IAM policy by either searching for it directly or scrolling through the displayed list, and then choose **Next**.

1. Assign users or groups to the IAM policy by either searching by name, email address, or group name, or scrolling through the displayed list and selecting the appropriate users or groups. You can also choose to assign the policy to all users and groups by selecting the checkbox; this will apply the policy to all current and future users and groups.

1. Choose **Next**.

1. Review your selections and choose **Save and enable**.

1. You can enable or disable the assignment at any time by selecting the checkbox next to the assigment name and choosing **Enable** or **Disable**. You can view the status of the policy assignment under the **Status** column.

**To edit an IAM policy assignment:**

1. Open the [Quick console](https://quicksight.aws.amazon.com/).

1. Choose the user icon at the top right, and then choose **Manage Quick**.

1. Under the **Permissions** section, choose **IAM policy assignments**.

1. Choose the edit (pencil) icon.

1. Review the sections and choose **Edit** to make any changes.

1. Choose **Save and enable** to apply your updates.

**To delete an IAM policy assignment:**

1. Open the [Quick console](https://quicksight.aws.amazon.com/).

1. Choose the user icon at the top right, and then choose **Manage Quick**.

1. Under the **Permissions** section, choose **IAM policy assignments**.

1. Choose the delete (trash) icon.

1. A confirmation modal will appear to ensure you want to procede with the deletion. Choose **Delete** to delete the IAM policy assignment.