Sharing Using AD Groups

Question & Answer
, , ,
1

When searching for a group to share an asset with, it doesn’t seem like all of our groups are returning.

We are using Identity Center in our (large) organization.

For instance, if I search for MY-GROUP-A, I only get MY-GROUP-ALL-READER returned.

There should be MY-GROUP-ADMIN, MY-GROUP-AUTHOR and MY-GROUP-ALL-READER in the list.

That being said, if I go to the “Manage Role Groups” and search there to add to one of the Quicksight roles, all groups are returned.

This is true for multiple Quicksight accounts.

Any ideas?

2

Hello @robertsn5 , welcome to the QuickSight community!

That’s pretty interesting, where are you seeing this happen in the QuickSight console? I have noticed that in search boxes throughout QuickSight you can get an inconsistent experience.

Also, if you type in more characters do all of your groups eventually appear or are the groups totally missing?

3

This happens anywhere I want to share (or manage permissions) of assets. It occurs in either the normal Quicksight frontend, or in the “Manage Quicksight” admin area.

I can enter the entire group name, and it never shows.

They do show up when under the “Manage role groups” area. Very odd.

I end up having to use the API to share things. Not the best solution, although we are trying to do as much as we can with automation, so hopefully soon it won’t be as much as an issue.

1 Like
4

Hey @robertsn5

Got it! That’s good but weird that you can at least access the groups in one part of the console. And it doesn’t seem to be an IAM policy issue if you can successfully share assets via API with those missing groups.

I would recommend creating a support ticket in this case because it sounds like a bug to me. Here are the steps to open a support case. If your company has someone who manages your AWS account, you might not have direct access to AWS Support and will need to raise an internal ticket to your IT team or whomever manages your AWS account. They should be able to open an AWS Support case on your behalf.