Amazon Quick Sight now supports user level custom permissions profile assignment for IAM Identity Center users. Custom permissions profiles enable administrators to restrict access to capabilities in the Quick Sight application by adding the profile to a user. A custom permissions profile defines which capabilities are disabled for a user or role. For example, administrators can restrict specific users from exporting data to excel and csv and prevent users from sharing Quick Sight assets.
Custom permissions profiles are managed with the following APIs: CreateCustomPermissions, ListCustomPermissions, DescribeCustomPermissions, UpdateCustomPermissions and DeleteCustomPermissions. Custom permissions assignment to users is managed with the following APIs: UpdateUserCustomPermission and DeleteUserCustomPermission. These APIs are supported with all identity types in Quick Sight.
This feature is available in all AWS Regions where Amazon Quick Sight is available. To learn more, see Customizing access to Amazon Quick Sight capabilities.
This is a companion discussion topic for the original entry at https://aws.amazon.com/about-aws/whats-new/2024/11/amazon-quicksight-fine-grained-permissions-capabilities-apis-iam-identity-center-users