Customizing access to Amazon QuickSight capabilities - Amazon QuickSight

Customizing access to Amazon QuickSight capabilities

 Applies to: Enterprise Edition 
   Intended audience: Administrators and Amazon QuickSight developers 

In Enterprise edition, you can restrict the functionality that people can access in Amazon QuickSight. You can configure custom permissions at the role (admin, author, reader) and user levels for all identity types in QuickSight. User level custom permissions override a role's existing default or custom role level permissions for the specified user.

The following limitations apply to custom permissions.

  • You can't grant permissions that are above a user's default role. For example, if a user has reader access, you can't grant permissions for that user to edit dashboards.

  • To customize user or role permissions, you need to be a QuickSight administrator with the following IAM permissions:

    • quicksight:CreateCustomPermissions

    • quicksight:DeleteCustomPermissions

    • quicksight:DescribeCustomPermissions

    • quicksight:ListCustomPermissions

    • quicksight:UpdateCustomPermissions

You can create custom permissions profiles to restrict access to any combination of the following operations.

Asset Customizable permissions

Datasets

Create or update all datasets

Datasets

Create or update SPICE datasets

Datasets

View account SPICE capacity

Datasets

Share datasets

Data sources

Create or update all data sources

Data sources

Share data sources

Dashboards and analyses

Add or run anomaly detection

Dashboards and analyses

Create or update themes

Dashboards and analyses

Share analyses

Dashboards and analyses

Share dashboards

Folders

Create shared folders

Folders

Rename shared folders

On-demand Reports and Exports

Print from the UI

On-demand Reports and Exports

Export to CSV files from the UI

On-demand Reports and Exports

Export to Excel files from the UI

On-demand Reports and Exports

Export to PDF files from the UI

Schedules and Attachments

Create or update report schedules

Schedules and Attachments

Subscribe to report schedules

Schedules and Attachments

Export to CSV files in scheduled email reports

Schedules and Attachments

Export to Excel files in scheduled email reports

Schedules and Attachments

Export to PDF files in scheduled email reports

Schedules and Attachments

Include content in scheduled email reports

Threshold alerts

Create or update threshold alerts

Use the following topics to create, apply, and modify a custom permissions profile for Amazon QuickSight.

Topics