Apply a custom permissions profile to an account - Amazon QuickSight
Apply a custom permissions profile to an account using the QuickSight APIs
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Apply a custom permissions profile to an account

To apply a custom permissions profile to an account

  1. Open the QuickSight console.

  2. From the top right, choose the profile icon.

  3. Choose Manage QuickSight. Only QuickSight administrators will be able to view this page.

  4. Choose the Manage Users section, and then choose Manage Custom Permissions.

  5. Locate the desired account custom permission. In the options menu under Actions, choose Set as account profile.

Apply a custom permissions profile to an account using the QuickSight APIs

After you have created a custom permissions profile, use the QuickSight API to add or change the custom permissions profile that is assigned to an account.

Before you begin, you will need to set up and configure the Amazon CLI. For more information about installing the Amazon CLI, see see Install or update the latest version of the Amazon CLI and Configure the Amazon CLI in the Amazon Command Line Interface user guide. You also need the following IAM permissions: quicksight:UpdateAccountPermission, quicksight:DescribeAccountPermission, and quicksight:DeleteAccountCustomPermission.

The following example calls the UpdateAccountPermission API to update the custom permissions that are assigned to an account.

aws quicksight update-account-custom-permission \
--aws-account-id AWSACCOUNTID \
--custom-permissions-name PERMISSIONNAME \
--region REGION

The following example returns the custom permissions profile that is assigned to an account.

aws quicksight describe-account-custom-permission \
--aws-account-id AWSACCOUNTID \
--region REGION

The following example unapplies a custom permissions profile from an account.

aws quicksight delete-account-custom-permission \
--aws-account-id AWSACCOUNTID \
--region REGION