Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Different editions of Amazon Quick Suite

Amazon Quick Suite offers Standard and Enterprise editions. Both editions offer a full set of features for creating and sharing data visualizations. Enterprise edition additionally offers encryption at rest and Microsoft Active Directory integration. In Enterprise edition, you select a Microsoft Active Directory directory in Amazon Directory Service. You use that active directory to identify and manage your Quick Suite users and administrators.

For more information about the different features offered by the Quick Suite editions and about pricing, see Amazon Quick Suite pricing.

Availability of editions

All editions are available in any Amazon Web Services Region that is currently supported by Amazon Quick Suite.

The capacity region in which you start your Amazon Quick Suite subscription is where your account's default SPICE capacity is allocated. However, you can purchase additional SPICE capacity and access your Amazon resources in any other supported Amazon Web Services Region.

New Amazon Quick Suite features are not available in the Standard edition. If you are an existing customer on the Standard edition, you can upgrade to Enterprise edition and provision appropriate roles to access Amazon Quick Suite features.

To manage Enterprise account settings, you must temporarily change your region for your session to US East (N. Virginia) Region. You can change it back when you have finished editing your account settings. These settings include changing your subscription's notification email, enabling IAM access requests, editing access to Amazon resources, and unsubscribing from Amazon Quick Suite.

User management between editions

User management is different between the Amazon Quick Suite Standard and Enterprise editions. However, both editions support identity federation, or Federated Single Sign-On (IAM Identity Center), through Security Assertion Markup Language 2.0 (SAML 2.0).

User management for standard edition

In the Standard edition, as a system administrator, you can invite an Amazon Identity and Access Management user and allow that user to use their credentials to access Amazon Quick Suite. Alternatively, you can invite any person with an email address to create an Amazon Quick Suite–only account. When you create a Amazon Quick Suite user account, Amazon Quick Suite sends an email to that user inviting them to activate their account.

When you create a Amazon Quick Suite user account, you also choose to assign it either an administrative or a user role. This role assignment determines the user's permissions in Amazon Quick Suite. You perform all management of users by adding, changing, and deleting accounts in Amazon Quick Suite.

User management for enterprise edition

In the Enterprise edition, as a system administrator, you can select one or more IAM Identity Center or Microsoft Active Directory groups for administrative access. All users in these groups are authorized to sign in to Amazon Quick Suite as Amazon Quick Suite administrators. You can also select one or more IAM Identity Center or Microsoft Active Directory groups in Amazon Directory Service for user access. All users in these groups are authorized to sign in to Amazon Quick Suite as users.

You can only add or remove Enterprise edition accounts by adding or removing a person from the IAM Identity Center or Microsoft Active Directory group that you associated with Amazon Quick Suite. When you add a Amazon Quick Suite user account, its permissions depend on whether the IAM Identity Center or Microsoft Active Directory group is an administrative group or a user group in Amazon Quick Suite.

To remove a user's access to Amazon Quick Suite, remove the user from an IAM Identity Center or Microsoft Active Directory group or remove their IAM Identity Center or Microsoft Active Directory group from an associated role in Amazon Quick Suite.

Permissions for the different editions

In the Standard edition, all Amazon Quick Suite administrators can manage subscriptions and SPICE capacity. They can also add, modify, and delete accounts.

Additional IAM permissions are required to manage Amazon Quick Suite permissions to Amazon resources and to unsubscribe from Amazon Quick Suite. These tasks can only be performed by an IAM user who also has administrative permissions in Amazon Quick Suite, or by the IAM user or Amazon account (system administrator) that created the Amazon Quick Suite account.

To manage access to Amazon resources from Amazon Quick Suite, you must be logged in as one of the following:

All IAM Identity Center or Microsoft Active Directory users that are Amazon Quick Suite administrators can manage subscriptions and SPICE capacity.

Additional IAM permissions are required to manage access to Amazon resources or to unsubscribe from Amazon Quick Suite. Administrators need to sign in with IAM permissions to perform these tasks.

For more information on admin user permissions, see Amazon Quick Suite user types.