By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS QuickSight IdP permission issue

0

We're using AWS QuickSight with Google SAML. For some users it's working fine but for others we're seeing below error. Any help would be appreciated.

You don't have permission to view this page. Contact your QuickSight administrator to request permission.

For more information, earlier we were using normal AWS IAM users to login into QuickSight and we recently moved to Google SAML login.

Thanks and Regards.

Topics
Security, Identity, & ComplianceAnalytics
Tags
Security, Identity, & ComplianceAWS Identity and Access ManagementAmazon QuickSightIAM Access Analyzer
Language
English
Secfi
asked 3 years ago954 views
2 Answers
1
Accepted Answer

It was happening due to IP restrictions. Thanks all.

Secfi
answered 3 years ago
profile picture
EXPERT
iwasa
reviewed 3 years ago
  • iwasa EXPERT
    3 years ago

    Thank you for sharing the cause. I hope it helps others because you shared the answer. I have reviewed this.

0

Hi, @Secfi.

Are some users signed in with Google SAML? (QuickSight-I'm wondering if SAML configuration between Google is failing)

If successful, check the following:

First, double-check the SAML attributes of users who can't sign in.

  • I think it contains IAM role and IAM IdP information, is that information correct?
  • Also, does the IAM role have the authority to provision to QuickSight?
  • Is there a QuickSight user for your user session?
profile picture
EXPERT
iwasa
answered 3 years ago
  • Secfi
    3 years ago

    Hello iwasa, Thanks for your reply. I'm using the exact same Role for these users, few of them can login and others can't. I don't understand your third question - Is there a QuickSight user for your user session? Can you please elaborate? Apologies for my naivety. Regards.

  • iwasa EXPERT
    3 years ago

    Thank you for additional information.

    Is there a QuickSight user for your user session?

    I would like you to check if there are any users you expect from the user list on the QuickSight management screen.

  • Secfi
    3 years ago

    Yes, there are users.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content