AWS outlines ways to downgrade Amazon Quick user roles

AWS’s October 5, 2026 post focuses on downgrading roles in Amazon Quick. It identifies Admin, Author, and Reader as roles to assign according to job functions and security needs, and says reducing a user’s role when they no longer need authoring or administrative capabilities supports least privilege.

The post says the Amazon Quick console does not provide a direct route from Admin to Reader or Author to Reader. It presents two alternatives: manually delete and recreate the user, or use AWS CLI operations. AWS also recommends considering ownership of dashboards and analyses when responsibilities change, and reviewing role assignments monthly or quarterly.

The identity setup affects how administrators make a change. For users authenticated through IAM Identity Center or Active Directory, the post says role changes are typically managed through external identity-provider group mappings. In IAM Identity Center environments, it describes moving a user between groups mapped to different roles without a step-down sequence. AWS documentation likewise describes mapping groups to Amazon Quick roles and notes that a removed user’s assets are not automatically transferred or deleted; administrators can review and transfer them. ([docs.aws.amazon.com](https://docs.aws.amazon.com/quick/latest/userguide/managing-user-access-idc.html?utm_source=openai))

The post also describes role-based pricing: Authors and Admins pay a fixed monthly per-user fee, while Readers use session-based pricing. Moving an Author who only consumes dashboards to a Reader role may therefore reduce costs, while administrators still need to account for access controls, role assignments, and asset ownership.