Automating Group Assignments

Question & Answer
1

HI there,

I know this is possible but have not seen much documentation on the the QS Pages for it. I am attempting to automate bucketing of users to groups/namespaces as they log in as we are configured with IAM SSO. I know it is possible to use lambda in combination with a crawler to remove the user and add them back to the account once they log in. I am not finding documentation on how to set this up. Any pointers?

2

Hi @pagekevi - Can you please try to explore the QuickSight boto3 API for this activity. Please see the documentation below - QuickSight - Boto3 1.28.5 documentation

Regards - Sanjeeb

3

Thanks Sanjeeb. Do you happen to have a sample script available or no of a repostory. If your are internal this is my Alias.

4

Hi @pagekevi - Just curious, why you are adding and removing the user and again adding them again. any specific reason for the same?

Regards - Sanjeeb

5

So they login through the iam role they are assigned to and we need to add them to the groups as QS will not do it automatically.

6

Hi @imaitri - Is it possible to get the boto3 examples for QuickSight API demonstrated in last QuickSight session. This will help us in some cases.

Hi @pagekevi - I believe you have to use register_user api.

https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/quicksight/client/register_user.html

Hi @Koushik_Muthanna - Need your help on an example of register_user api. I do not have an environment to test it. please help.

Regards - Sanjeeb