AWS connect documentation change
Summary
Restructured security permissions section, removed granular agent access details, and added guidance for hierarchy-based access control to limit manager access within their agent hierarchy.
Security assessment
The change introduces hierarchy-based access control documentation (a security feature) but removes specific permission descriptions. While access control improvements are security-adjacent, there's no evidence this addresses an active vulnerability. The addition of 'Apply hierarchy-based access control' demonstrates enhanced security documentation for data isolation.
Diff
diff --git a/connect/latest/adminguide/agent-performance-evaluation-dashboard.md b/connect/latest/adminguide/agent-performance-evaluation-dashboard.md index 3c6b63d4d..7465e0e7b 100644 --- a//connect/latest/adminguide/agent-performance-evaluation-dashboard.md +++ b//connect/latest/adminguide/agent-performance-evaluation-dashboard.md @@ -44,4 +43,0 @@ The dashboard provides a single place to view aggregated agent performance. Use -Ensure users are assigned the appropriate security profile permissions: - -**Manager access** - @@ -54,16 +50 @@ Grant managers the appropriate security profile permissions: - * **Evaluation forms - perform evaluations - View** : This permission enables users to view performance evaluation results. - - * **Evaluation forms - manage form definitions - View** : This permission enables users to view evaluation form definitions such as form structure, scoring weights, and more. - - * **Saved reports - Create, View, Publish [optional]** : Grants managers permissions to create custom saved dashboards and publish them to agents and other managers. - - - - -**Agent access** - -Agents can be granted access to only their own performance evaluation metrics by saving a custom dashboard that is accessible by agents within the 1) Amazon Connect agent workspace or 2) As a custom report in the Amazon Connect admin console. - - * **Saved reports - View** : Grants permission to view a published dashboard. - - * **View my own data in dashboards - View** : Grants access to the Dashboards to view individual agent performance metrics and the metrics of queues in the agent's routing profile. + * **Users - View** : This permission enables you to view users, such as agents receiving evaluations and managers performing evaluations. @@ -75,16 +56 @@ Agents can be granted access to only their own performance evaluation metrics by - - - -Save a custom dashboard by: - - * Add one or more performance evaluation widgets to an existing dashboard. - - - - - - * **Save** the dashboard. - - * Click **Share**. **Publish** the dashboard to make it available to other users. You may set the share setting to **Read-only** to prevent others from making edits to the dashboard. - - + * **Saved reports - Create, View, Publish [optional]** : Grants managers permissions to create custom saved dashboards and publish them to agents and other managers. @@ -95 +61 @@ Save a custom dashboard by: -You can **Share the dashboard link** for agents to access the dashboard within the Amazon Connect admin console. For agents to access the saved dashboard on the Connect agent workspace see: [Integrate a published dashboard into the agent workspace](./integrate-published-dashboard.html). +You can limit team manager access to performance evaluation metrics within their own agent hierarchy. See [Apply hierarchy-based access control to dashboards and reports in Amazon Connect](./dashboard-access-control.html).