Manage users - Amazon SageMaker

Manage users

After your RStudio-enabled Amazon SageMaker domain is running, you can add user profiles (UserProfiles) to the domain. The following topics show how to create user profiles that are authorized to use RStudio, as well as update an existing user profile. For information on how to delete an RStudio App, UserProfile, or domain, follow the steps inĀ Delete an Amazon SageMaker domain.

Note

The limit for the total number of UserProfiles in a Amazon SageMaker domain is 60.

There are two types of users:

  • Unauthorized: This user cannot access the RStudio app. By default, a new user is Unauthorized if the domain is enabled for RStudio.

  • Authorized: This user can access the RStudio app and use one of the RStudio license seats.

If a user is authorized, they can be given one of the following levels of access to RStudio.

  • RStudio User: This is a standard RStudio user and can access RStudio.

  • RStudio Admin: The admin of your Amazon SageMaker domain has the ability to create users, add existing users, and update the permissions of existing users. Admins can also access the RStudio Administrative dashboard. However, this admin is not able to update parameters that are managed by Amazon SageMaker.

Methods to create a user

The following topics show how to create a user in your RStudio-enabled Amazon SageMaker domain.

Create user console

To create a user in your RStudio-enabled Amazon SageMaker domain from the console, complete the steps in Add user profiles.

Create user CLI

The following command shows how to add users to a Amazon SageMaker domain with IAM authentication. A User can belong to either the R_STUDIO_USER or R_STUDIO_ADMIN User group.

aws sagemaker create-user-profile --region <REGION> \ --domain-id <DOMAIN-ID> \ --user-profile-name <USER_PROFILE_NAME-ID> \ --user-settings RStudioServerProAppSettings={UserGroup=<USER-GROUP>}

The following command shows how to add users to a Amazon SageMaker domain with authentication using IAM Identity Center. A user can belong to either the R_STUDIO_USER or R_STUDIO_ADMIN User group.

aws sagemaker create-user-profile --region <REGION> \ --domain-id <DOMAIN-ID> \ --user-profile-name <USER_PROFILE_NAME-ID> \ --user-settings RStudioServerProAppSettings={UserGroup=<USER-GROUP>} \ --single-sign-on-user-identifier UserName \ --single-sign-on-user-value <USER-NAME>

Update existing user

You cannot update the authorization of an existing user. You must delete the existing user and create a new one with the updated authorization.

Log in to RStudio as another user

  1. Open the Amazon SageMaker console at https://console.aws.amazon.com/sagemaker/.

  2. On the left navigation pane, choose Admin configurations.

  3. Under Admin configurations, choose domains.

  4. Select the domain containing the user profile.

  5. Select a user name from the list of users. This opens a new page with details about the user profile and the apps that are running.

  6. Select Launch.

  7. From the dropdown, select RStudio to launch an RStudio instance.

Terminate sessions for another user

  1. From the list of running apps, identify the app you want to delete.

  2. Click the respective Delete app button for the app you are deleting.

Delete another user

You cannot delete a user if the user is running any apps. Delete all apps before attempting to delete a user.

  1. From the User Profile page, select Edit. This opens a new General settings page.

  2. Under Delete user, select Delete user.