- Newest
- Most votes
- Most comments
Amazon Connect dashboards can indeed be restricted to specific users or groups through several methods. The primary approach is utilizing AWS Identity and Access Management (IAM) policies to control access permissions. These policies can be configured to grant specific actions like viewing, describing, and listing dashboards to designated users or groups.
To implement this restriction, you'll first need to create appropriate IAM policies that specify the allowed actions and resources. These policies should include permissions for actions such as "quicksight:DescribeDashboard," "quicksight:ListDashboards," and "quicksight:GetDashboardEmbedUrl" while targeting the specific dashboard's ARN (Amazon Resource Name).
You can get more details on https://docs.aws.amazon.com/connect/latest/adminguide/dashboard-required-permissions.html
Another method is using QuickSight's built-in dashboard sharing features. Within the QuickSight console, you can navigate to your dashboard, click the "Share" button, and select "Share with users." This allows you to specifically designate which users or groups can access the dashboard and what level of permissions they have (such as Viewer or Owner access).
For more granular control, you can implement resource-level permissions by creating specific IAM roles and assigning them to particular users or groups. These roles can then be linked to dashboard resources, ensuring precise access control.
answered 9 months ago
Sharing dashboards to specific users / tags / hierarchy is not yet supported. At this time, you can publish a dashboard, and everyone who has permissions to view the dashboard would be able to access it.
answered 8 months ago
Relevant content
- AWS OFFICIALUpdated 2 months ago
