AWS QuickSight IdP permission issue

We're using AWS QuickSight with Google SAML. For some users it's working fine but for others we're seeing below error. Any help would be appreciated.

You don't have permission to view this page. Contact your QuickSight administrator to request permission.

For more information, earlier we were using normal AWS IAM users to login into QuickSight and we recently moved to Google SAML login.

Thanks and Regards.

Topics

Tags

Language

English

asked 2 years ago633 views

2 Answers

Accepted Answer

It was happening due to IP restrictions. Thanks all.

answered 2 years ago

EXPERT

reviewed 2 years ago

iwasa EXPERT
2 years ago
Thank you for sharing the cause. I hope it helps others because you shared the answer. I have reviewed this.

Hi, @Secfi.

Are some users signed in with Google SAML? (QuickSight-I'm wondering if SAML configuration between Google is failing)

If successful, check the following:

First, double-check the SAML attributes of users who can't sign in.

I think it contains IAM role and IAM IdP information, is that information correct?
Also, does the IAM role have the authority to provision to QuickSight?
Is there a QuickSight user for your user session?

EXPERT

answered 2 years ago

Secfi
2 years ago
Hello iwasa, Thanks for your reply. I'm using the exact same Role for these users, few of them can login and others can't. I don't understand your third question - Is there a QuickSight user for your user session? Can you please elaborate? Apologies for my naivety. Regards.
iwasa EXPERT
2 years ago
Thank you for additional information.

Is there a QuickSight user for your user session?

I would like you to check if there are any users you expect from the user list on the QuickSight management screen.
Secfi
2 years ago
Yes, there are users.

Relevant content