Need the data for quicksight dashboard access permissions to get the differentiation between LDAP and individual accesses. How and where can I get the data for that without manually going through each dashboard permissions. Need a way I can get the permission data for all the dashboards I own and manage accesses based on requirement
Hi @mxdhur and welcome to the community!
You can pull permission data programmatically using the AWS CLI or SDK without manually checking each dashboard. The DescribeDashboardPermissions API operation returns the read and write permissions for a dashboard, including whether access was granted to individual users or groups (which would be your LDAP groups). I believe you would end up using ListDashboards first to get all your dashboard IDs, then loop through each one with DescribeDashboardPermissions to get the full picture.
There’s also an AWS blog post that walks through building an administrative dashboard that displays permissions for all your assets in one place: Centrally tracking dashboard lineage, permissions, and more with Amazon QuickSight administrative dashboards. This approach creates a dataset from the API output so you can visualize and filter permissions across all dashboards without checking them one by one.
I’ve also attached some official AWS documentation about this process in case it provides extra insight:
Hope this helps and feel free to keep us updated!
Hi @mxdhur,
Just checking back in since this thread hasn’t received a response in a while. Was Cesar’s reply helpful to you and/or were you able to find a solution yourself in the meantime? Please help the community by marking this answer as “Solution” or following up in general within the next 3 business days!
Thank you!