What is the equivalent API action to change asset ownership?
I’m talking about this screen:
Hi @m0ltar
You can use update analysis / dashboard / dataset permissions.
https://docs.aws.amazon.com/cli/latest/reference/quicksight/update-analysis-permissions.html
Hi @Max, thank you for your reply.
I am familiar with the permissions. But it is not clear what constitutes an “owner”. There is no such permission as “owner”. All permissible actions are IAM actions that are finely grained.
@m0ltar ,
Dataset permissions
In the API world maps to below
aws quicksight describe-data-set-permissions --aws-account-id $a21 --data-set-id 477ebcd8-a922-4c60-89bc-a086fa0eeb13
"Permissions": [
{
"Principal": "arn:aws:quicksight:eu-central-1:XXX:user/default/OrganizationAccountAccessRole/gankoush-Isengard",
"Actions": [
"quicksight:DescribeRefreshSchedule",
"quicksight:ListIngestions",
"quicksight:DescribeDataSetPermissions",
"quicksight:ListRefreshSchedules",
"quicksight:DescribeDataSet",
"quicksight:PassDataSet",
"quicksight:DescribeIngestion"
]
},
{
"Principal": "arn:aws:quicksight:eu-central-1:XXX:user/default/Admin_QS_GA_2/gankoush-Isengard",
"Actions": [
"quicksight:DeleteDataSet",
"quicksight:UpdateDataSetPermissions",
"quicksight:PutDataSetRefreshProperties",
"quicksight:CreateRefreshSchedule",
"quicksight:CancelIngestion",
"quicksight:UpdateRefreshSchedule",
"quicksight:DeleteRefreshSchedule",
"quicksight:ListRefreshSchedules",
"quicksight:DescribeDataSetRefreshProperties",
"quicksight:DescribeDataSet",
"quicksight:PassDataSet",
"quicksight:CreateIngestion",
"quicksight:DescribeRefreshSchedule",
"quicksight:ListIngestions",
"quicksight:DescribeDataSetPermissions",
"quicksight:UpdateDataSet",
"quicksight:DeleteDataSetRefreshProperties",
"quicksight:DescribeIngestion"
]
}
],
1 Like
Ok, thanks for the example. But which exact set of actions constitutes ownership? Also, what if two principals have exactly the same actions, which one is deemed to be the owner?
Both are owners if 2 users have the actions of an owner.