QuickSight access for federated user/role

Yes, it is possible to provide access to Amazon QuickSight for federated users. There are a few different approaches you can take:

Configure QuickSight access through an external identity provider (IdP) like Active Directory, and IAM. QuickSight will link to the user record in the IdP. You can assign QuickSight permissions like admin, author or reader based on IdP group memberships.

Configure QuickSight access through AWS SSO (successor to AWS Single Sign-On). You can follow the documentation to set up the IdP connection between AWS SSO and QuickSight to enable federated authentication.

For the Enterprise edition of QuickSight, you can also directly connect QuickSight to an Active Directory. The user passwords will be managed in Active Directory, and users log in through the QuickSight console.

In all the cases, federated users will get single sign-on access to QuickSight without needing separate IAM users or local QuickSight users to be created. You can use IAM policies to control the level of self-service access federated users have for provisioning QuickSight.