Permisisons for QuickSight brand customization
To set up a brand, you must be granted an Admin role through IAM Identity Center or IAM. Admins whose roles are granted to them within QuickSight can't create brands. To learn more about integrating your account with IAM Identity Center, see Configure your Amazon QuickSight account with IAM Identity Center.
Admin users can only manage brands that are in the same capacity Region as their account.
The IAM role that you use to create a brand in QuickSight must contain quicksight:*
or granular action permissions to manage brands in the admin console. The following granular permissions are required for admins to work with QuickSight brands:
-
quicksight:CreateBrand
-
quicksight:UpdateBrand
-
quicksight:DescribeBrand
-
quicksight:DescribeBrandPublishedVersion
-
quicksight:UpdateBrandPublishedVersion
-
quicksight:DeleteBrand
-
quicksight:ListBrands
-
quicksight:UpdateBrandAssignment
-
quicksight:DescribeBrandAssignment
-
quicksight:DeleteBrandAssignment
After you confirm that your Admin role contains the required permissions, you can create a custom brand in the QuickSight admin console.