title: Integrate Quicksight with Cognito for access via Google login
body: <p>I have my enterprise Quicksight in place and with users using our company email to register an account (like john.doe@mycompany.com). We're using Gmail for business. </p>
  
  <p>On the other hand we have developed another application backed by AWS Cognito user pool using Google as an identity provider, and since this is the same user base our intention was to use the same user pool for Quicksight access. In addition we will develop a Lambda that would synchronize Cognito user group association with Quicksight memberships if/when necessary.</p>
  
  <p>I've followed the example described here <a href="https://aws.amazon.com/blogs/big-data/use-amazon-quicksight-federated-single-sign-on-with-amazon-cognito-user-pools/" rel="nofollow noreferrer">https://aws.amazon.com/blogs/big-data/use-amazon-quicksight-federated-single-sign-on-with-amazon-cognito-user-pools/</a>, but the problem is that even though I login as different users I get access to Quicksight via same IAM role. The Quicksight user associated with this role has a specific username starting with <code>CognitoQuickSight1-AuthRole-KX4Y16...</code> and email associated with the user I used to login the very first time. </p>
  
  <p>Now I'm wondering if in this setup it's even possible to have different roles associated with different users so they can be differentiated on Quicksight side? Or is there any other way to achieve this?</p>