Provisioning users for Amazon Quick Suite
| Applies to: Enterprise Edition and Standard Edition |
| Intended audience: System administrators and Amazon Quick Suite administrators |
Self-provisioning an Amazon Quick Suite administrator
Amazon Quick Suite administrators are users who can also manage Amazon Quick Suite features such as account settings and accounts. They can also purchase additional Amazon Quick Suite user subscriptions, purchase SPICE, and cancel the subscription to Amazon Quick Suite for your Amazon Web Services account.
You can use an Amazon user or group policy to give users the ability to add
themselves as administrators of Amazon Quick Suite. Users that have been granted this
ability can only add themselves as administrators and can't use this policy to add
others. Their accounts become active and billable the first time that they open
Amazon Quick Suite. To set up self-provisioning, give these users permission to use the
quicksight:CreateAdmin action.
Alternatively, you can use the following procedure to use the console to set or create the administrator for Amazon Quick Suite.
To make a user the Amazon Quick Suite administrator
-
Create the Amazon user:
-
Use IAM to create the user that you want to be the administrator of Amazon Quick Suite. Alternatively, identify an existing user in IAM for the administrator role. You can also put the user inside a new group, for manageability.
-
Grant the user (or group) sufficient permissions.
-
-
Sign in to your Amazon Web Services Management Console with the target user's credentials.
-
Go to http://quicksight.aws.amazon.com/sn/console/get-user-email
, type in the target user's email address, and choose Continue.
On success, the target user is now an administrator in Amazon Quick Suite.
Self-provisioning an Amazon Quick Suite author
Amazon Quick Suite authors can create data sources, datasets, analyses, and dashboards. They can share analyses and dashboards with other Amazon Quick Suite users in your Amazon Quick Suite account. However, they don't have access to the Manage Amazon Quick Suite menu. They can't change account settings, manage accounts, purchase additional Amazon Quick Suite user subscriptions or SPICE capacity, or cancel the subscription to Amazon Quick Suite for your Amazon Web Services account. Author Pro users can additionally create content using natural language, build knowledge bases, configure actions, and access advanced automation capabilities.
You can use an Amazon user or group policy to give users the ability
to create an Amazon Quick Suite author account for themselves. Their accounts become
active and billable the first time they open Amazon Quick Suite. To set up
self-provisioning, you need to give them permission to use the
quicksight:CreateUser action.
Self-provisioning an Amazon Quick Suite read-only user
Amazon Quick Suite read-only users or readers can view and manipulate dashboards that are shared with them, but they can't make any changes or save a dashboard for further analysis. Amazon Quick Suite readers can't create data sources, datasets, analyses, or visuals. They can't do any administrative tasks. Choose this role for people who are consumers of the dashboards but don't author their own analysis, for example, executives. Reader Pro users have access to advanced features including AI chat agents, collaborative spaces, flows, and extensions.
If you are using Microsoft Active Directory with Amazon Quick Suite, you can manage read-only permissions by using a group. Otherwise, you can bulk-invite users to use Amazon Quick Suite. You can also use an Amazon user or group policy to give people the ability to create an Amazon Quick Suite reader account for themselves.
Reader accounts become active and billable the first time they open Amazon Quick Suite.
If you decide to upgrade or downgrade a user, billing for that user is prorated for
the month. To set up self-provisioning, you need to give them permission to use the
quicksight:CreateReader action.
Readers that are used to automatically or programmatically refresh dashboards for near real-time use cases must choose capacity pricing. For readers under user pricing, each reader is limited to manual use by one individual only.