Configuring Amazon DCV authorization

Authorization is used to grant or deny Amazon DCV clients permissions to specific Amazon DCV features. In Amazon DCV, authorization is configured using a permissions file. The permissions file defines the specific Amazon DCV features that are available to specific users when they connect to a session.

Amazon DCV supports two types of permissions files:

Default permissions file

If you don't specify a custom permissions file when creating a session, the default permissions file is used for all sessions. The default permissions file grants only the session owner full access to all features.

You can customize the default permissions file to include custom authorizations. The default permissions file is located in C:\Program Files\NICE\DCV\Server\conf\default.perm on Windows NICE DCV servers and /etc/dcv/default.perm on Linux NICE DCV servers.

For information about customizing the default permissions file, see Understanding permissions files.

Custom permissions file

You can use a custom permissions file to define the features that specific users or groups have access to when they connect to a Amazon DCV session. When you use a custom permissions file, you override the default permissions file.

To use a custom permissions file, you must first create the permissions file. Next, specify it when you start the session using the --permissions-file option with the dcv create-session command. For more information about starting sessions, see Starting Amazon DCV sessions.

For information about creating a custom permissions file, see Understanding permissions files.