Permisisons for QuickSight brand customization - Amazon QuickSight
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Permisisons for QuickSight brand customization

To set up a brand, you must be granted an Admin role through IAM Identity Center or IAM. Admins whose roles are granted to them within QuickSight can't create brands. To learn more about integrating your account with IAM Identity Center, see Configure your Amazon QuickSight account with IAM Identity Center.

Admin users can only manage brands that are in the same capacity Region as their account.

The IAM role that you use to create a brand in QuickSight must contain quicksight:* or granular action permissions to manage brands in the admin console. The following granular permissions are required for admins to work with QuickSight brands:

  • quicksight:CreateBrand

  • quicksight:UpdateBrand

  • quicksight:DescribeBrand

  • quicksight:DescribeBrandPublishedVersion

  • quicksight:UpdateBrandPublishedVersion

  • quicksight:DeleteBrand

  • quicksight:ListBrands

  • quicksight:UpdateBrandAssignment

  • quicksight:DescribeBrandAssignment

  • quicksight:DeleteBrandAssignment

After you confirm that your Admin role contains the required permissions, you can create a custom brand in the QuickSight admin console.