IAM policy to access all the analysis and dashboards in the QS account

Question & Answer
1

Below is the IAM policy that is attached to the console role qs-readers .I would want to give access to all the published dashboards and analyses in this Quicksight account.I am unable to find the policies for the same.Could someone please guide me to that.I am not using amazon bi account

    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ds:AuthorizeApplication",
                "ds:UnauthorizeApplication",
                "ds:CheckAlias",
                "ds:CreateAlias",
                "ds:DescribeDirectories",
                "ds:DescribeTrusts",
                "ds:DeleteDirectory",
                "ds:CreateIdentityPoolDirectory",
                "iam:ListAccountAliases",
                "quicksight:CreateAdmin",
                "quicksight:Subscribe",
                "quicksight:GetGroupMapping",
                "quicksight:SearchDirectoryGroups",
                "quicksight:SetGroupMapping"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Deny",
            "Action": "quicksight:Unsubscribe",
            "Resource": "*"
        }
    ]
}```
2

Please add following actions to allow list.
quicksight:ListAnalyses
quicksight:ListDashboards

For your reference all the actions defined by QuickSight are listed here.

https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonquicksight.html#amazonquicksight-actions-as-permissions

1 Like