Managing User Accounts in QuickSight Enterprise Edition | Supported Methods

Supported Methods of Managing User Accounts in QuickSight Enterprise Edition

Question

MSP Bank, Limited is a leading Japanese monetary institution that provides a full range of financial products and services to both institutional and individual customers.

It is headquartered in Tokyo.

MSP Bank is hosting their existing infrastructure on AWS.

MSP bank has many segments internally and they are planning to launch a self-data discovery platform running out of AWS on QuickSight. Using QuickSight, multiple datasets are created and multiple analyses are generated respectively.

The Team is working on visuals and security.

What are the supported methods of managing user accounts in QuickSight Enterprise Edition? select 3 options.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer: A, B, C.

In Enterprise edition, you can manage users through any of the following:

Active Directory.

You can add and remove Microsoft Active Directory directory groups to create and deactivate user accounts.

You can access the directory groups directly or by using the AD Connector.

Federated logins.

Inviting users by email.

https://docs.aws.amazon.com/quicksight/latest/user/managing-users-enterprise.html

QuickSight Enterprise Edition provides several methods to manage user accounts. MSP Bank can use any of the following three methods to manage their QuickSight user accounts:

A. Add and remove Microsoft Active Directory groups to create and deactivate user accounts:

QuickSight supports integration with Microsoft Active Directory, which enables MSP Bank to create and manage user accounts and groups in Active Directory. This integration allows MSP Bank to manage access to QuickSight resources by adding and removing users and groups in Active Directory, which provides centralized control and simplifies user management.

B. Federated Logins:

Federated logins are an authentication method that enables MSP Bank to allow their users to sign in to QuickSight using their existing credentials from their organization's identity provider (IdP). QuickSight supports several identity providers, such as AWS Single Sign-On, Microsoft Azure Active Directory, Okta, and Ping Identity. MSP Bank can use federated logins to enable their users to sign in to QuickSight without creating new accounts or remembering additional passwords.

C. Inviting Users by Email:

MSP Bank can also invite users to QuickSight by sending them an email invitation. Invited users can create their own QuickSight accounts and sign in to access QuickSight resources. MSP Bank can use this method to add external users who do not have Active Directory accounts or federated credentials.

D. Login through IAM:

IAM (Identity and Access Management) is a web service that enables MSP Bank to manage access to AWS resources securely. QuickSight supports IAM-based authentication, which allows MSP Bank to control user access to QuickSight resources based on IAM policies. MSP Bank can use this method to grant access to QuickSight resources to IAM users and roles.

In summary, MSP Bank has the following options for managing user accounts in QuickSight Enterprise Edition:

  1. Add and remove Microsoft Active Directory groups to create and deactivate user accounts.
  2. Federated Logins
  3. Inviting Users by Email.
  4. Login through IAM.