Enabling the Procurement insights dashboard - AWS Marketplace
Dashboard prerequisitesActivating the dashboardFor administrators: example policy

Enabling the Procurement insights dashboard

The following sections explain how to meet the general prerequisites for enabling the Procurement insights dashboard, and how to activate it.

If you need assistance with any part of this section, contact your AWS administrator.

Dashboard prerequisites

To set up and enable the Procurement insights dashboard, you must have the following prerequisites:

  • All features enabled for your organization. For more information, see Enabling all features for an organization with AWS Organizations, in the AWS Organizations User Guide.

  • A service-linked role that integrates the dashboard with your organization.

  • The following permissions:

    • aws-marketplace:GetBuyerDashboard

    • iam:CreateServiceLinkedRole

    • organizations:EnableAWSServiceAccess

    • organizations:DescribeOrganization

    • organizations:DeregisterDelegatedAdministrator

    • organizations:ListAWSServiceAccessForOrganization

    • organizations:ListDelegatedAdministrators

    • organizations:RegisterDelegatedAdministrator

    Note

    If you need help creating these permissions, contact your AWS administrator.

Activating the dashboard

You or your AWS administrator use the AWS Marketplace console to activate the dashboard.

Important

You or your AWS administrator must have a full-featured organization, and you must belong to an AWS Organizations management account to complete the following steps. For more information, see Tutorial: Creating and configuring an organization and Managing the management account with AWS Organizations, both in the AWS Organizations User Guide.

To activate the dashboard

  1. Open the AWS Marketplace console at https://console.aws.amazon.com/marketplace.

  2. In the navigation pane, choose Settings.

  3. Under AWS Marketplace procurement insights, choose Enable trusted access.

  4. Select both checkboxes, Enable trusted access across your organization, and Create a service-linked role for your organization.

  5. Choose Create integration.

Once you create the integration, the system creates the following service-linked roles and AWS managed policies:

Important

If you use the AWS command line interface (CLI) to active the dashboard, you must create the service-liked roles listed above before you enable trusted access. Otherwise, the activation process fails.

For administrators: example policy

This example policy contains the permissions described in Dashboard prerequisites, earlier in this section.

{
    "Version": "2012-10-17",
    "Statement": [{
            "Sid": "CreateServiceLinkedRoleForProcurementInsights",
            "Effect": "Allow",
            "Action": "iam:CreateServiceLinkedRole",
            "Resource": "arn:aws:iam::*:role/aws-service-role/procurement-insights.marketplace.amazonaws.com/AWSServiceRoleForProcurementInsights*",
            "Condition": {
                "StringLike": {
                    "iam:AWSServiceName": "procurement-insights.marketplace.amazonaws.com"
                }
            }
        },
        {
            "Sid": "EnableAWSServiceAccessForProcurementInsights",
            "Effect": "Allow",
            "Action": [
                "organizations:EnableAWSServiceAccess"
            ],
            "Resource": "*",
            "Condition": {
                "StringLike": {
                    "organizations:ServicePrincipal": "procurement-insights.marketplace.amazonaws.com"
                }
            }
        },
        {
            "Sid": "ManageDelegatedAdministrators",
            "Effect": "Allow",
            "Action": [
                "organizations:ListDelegatedAdministrators",
                "organizations:DeregisterDelegatedAdministrator",
                "organizations:RegisterDelegatedAdministrator"
            ],
            "Resource": "*",
            "Condition": {
                "StringLike": {
                    "organizations:ServicePrincipal": "procurement-insights.marketplace.amazonaws.com"
                }
            }
        },
        {
            "Sid": "GetBuyerDashboardStatement",
            "Effect": "Allow",
            "Action": "aws-marketplace:GetBuyerDashboard",
            "Resource": "*"
        },
        {
            "Sid": "ViewOrganizationDetails",
            "Effect": "Allow",
            "Action": [
                "organizations:DescribeOrganization",
                "organizations:ListAWSServiceAccessForOrganization"
            ],
            "Resource": "*"
        }
    ]
}

For more information about creating policies, see Policies and permissions in AWS Identity and Access Management, in the IAM User Guide.