Managing access for IAM Identity Center users
| Applies to: Enterprise Edition |
| Intended audience: System administrators and Amazon QuickSight administrators |
AWS administrators can use this topic to learn more about managing accounts that are integrated with IAM Identity Center. The information in this section also applies to QuickSight accounts that use Active Directory.
To manage QuickSight users, you must have administrative privileges in Amazon QuickSight and also the appropriate AWS permissions. For more information about the necessary AWS permissions, see IAM policy examples for Amazon QuickSight. If you are using directory groups, you need to be a network administrator.
Each Amazon QuickSight Enterprise edition account can have an unlimited number of users. User
names that contain a semicolon ( ; ) aren't supported.
Use the following topics to add, view, and deactivate Amazon QuickSight users.
Topics
Important
You can't remap Amazon QuickSight users or groups from one identity store to another. For example, if you are migrating from an on-premises Active Directory to AWS Directory Service, or the other way around, you unsubscribe and resubscribe to Amazon QuickSight. You do this because even if the user's aliases remain the same, the underlying identity data changes. To make the transition easier, request in advance that your users document all their Amazon QuickSight assets and settings before the migration.
