Identity and access management in Amazon QuickSight

Applies to: Enterprise Edition and Standard Edition

Intended audience: System administrators and Amazon QuickSight administrators

Amazon QuickSight Enterprise edition integrates with your existing directories, using either Microsoft Active Directory or single sign-on (IAM Identity Center) using Security Assertion Markup Language (SAML). You can use AWS Identity and Access Management (IAM) to further enhance your security, or for custom options such as embedding dashboards.

In Amazon QuickSight Standard edition, you can manage users entirely within Amazon QuickSight. If you prefer, you can integrate with your existing users, groups, and roles in IAM.

You can use the following tools for identity and access to Amazon QuickSight:

• IAM Identity Center (Enterprise edition only)

• IAM federation (Standard and Enterprise editions)

• AWS Directory Service for Microsoft Active Directory (Enterprise edition only)

• SAML-based single sign-on (IAM Identity Center) (Standard and Enterprise edition)

• Multifactor authentication (MFA) (Standard and Enterprise edition)

Note

In the regions listed below, QuickSight accounts can only use IAM Identity Center for identity and access management.

• af-south-1 Africa (Cape Town)

• ap-southeast-3 Asia Pacific (Jakarta)

• eu-south-1 Europe (Milan)

• eu-central-2 Europe (Zurich)