Amazon Chime - Administration Guide

Amazon Chime - Administration Guide
Amazon Chime
Administration Guide
Amazon Chime Administration Guide
Amazon Chime: Administration Guide
Copyright © 2017 Amazon Web Services, Inc. and/or its affiliates. All rights reserved.
Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner
that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not
owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by
Amazon.
Amazon Chime Administration Guide
Table of Contents
What is Amazon Chime? ..................................................................................................................... 1
Overview ................................................................................................................................... 1
Get Started ....................................................................................................................................... 2
Step 1: Create an AWS Account ................................................................................................... 2
Step 2: Create an Amazon Chime Account ..................................................................................... 2
Step 3: Purchase Amazon Chime .................................................................................................. 3
Manage Users for a Team Account ....................................................................................................... 6
Invite Users ............................................................................................................................... 6
Remove Users ............................................................................................................................ 6
Manage Users for an Enterprise Account ............................................................................................... 8
Invite Users ............................................................................................................................... 8
Suspend Users ........................................................................................................................... 8
Convert a Team Account to an Enterprise Account .......................................................................... 9
Connect to Active Directory ......................................................................................................... 9
Manage Licenses .............................................................................................................................. 11
Change Personal Meeting PINs ........................................................................................................... 12
Control Access to the Console ............................................................................................................ 13
Amazon Chime Actions ............................................................................................................. 13
Example: Full Console Access ..................................................................................................... 14
Example: Read-only Console Access ............................................................................................ 15
Contact Support ............................................................................................................................... 16
Document History ............................................................................................................................ 17
iii
Amazon Chime Administration Guide
Overview
What is Amazon Chime?
Amazon Chime is a secure, real-time, unified communications service that helps you run online meetings
efficiently. Amazon Chime runs securely on the AWS cloud. The service delivers high-quality audio and
video through an application that is easy to use and stays in sync across all of your devices. With Amazon
Chime, meetings start on time and a visual roster makes them easy to manage.
Overview
As an administrator, you'll use the Amazon Chime console to perform key tasks, such as creating Amazon
Chime accounts, managing Amazon Chime users, and managing Amazon Chime licenses. You must have
an AWS account to access the Amazon Chime console.
With Amazon Chime, you choose a subscription plan for your Amazon Chime users: Amazon Chime Plus
or Amazon Chime Pro. Pricing is per user per month, and if you change plans within a month, plans
are prorated daily. You can try Amazon Chime Pro for 30 days for free. You can change or cancel a
subscription at any time. For more information, see Plans and pricing.
There are two types of Amazon Chime accounts: team accounts and enterprise accounts. When you
create an Amazon Chime account, it is a team account. You can invite users from any email domain to
join a team account using the Amazon Chime console. Users receive an invitation email. When users
accept your invitation, they are granted an Amazon Chime Plus license. Users can download the Amazon
Chime client application at any time, and can be granted an Amazon Chime Pro license from the Amazon
Chime console. For more information, see Get Started Using Amazon Chime (p. 2).
If your users are from your organization's email domain, you can convert your team account to an
enterprise account. To do this, you send email invitations to your users with instructions to download
the Amazon Chime client application. Your users then register for Amazon Chime using their corporate
email addresses, which automatically adds them to your Amazon Chime enterprise account. You can also
choose to connect your Amazon Chime account with your Active Directory. This enables your Amazon
Chime users to log in to Amazon Chime using their directory credentials. For more information, see
Manage Users for an Amazon Chime Enterprise Account (p. 8).
1
Amazon Chime Administration Guide
Step 1: Create an AWS Account
Get Started Using Amazon Chime
To get started with Amazon Chime, complete the following tasks.
Tasks
• Create an AWS Account (p. 2)
• Create an Amazon Chime Account (p. 2)
• Purchase Amazon Chime (p. 3)
Step 1: Create an AWS Account
If you have an AWS account already, skip to the next task. If you don't have an AWS account, use the
following procedure to create one.
To create an AWS account
1.
Open https://aws.amazon.com/, and then choose Create an AWS Account.
2.
Follow the online instructions.
Part of the sign-up procedure involves receiving a phone call and entering a PIN using the phone
keypad.
Step 2: Create an Amazon Chime Account
After you've created your AWS account, you can create an Amazon Chime account.
To create an Amazon Chime account
1.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
2.
On the Accounts page, choose New account.
3.
For Account Name, type a name for the account, and then choose Create account.
2
Amazon Chime Administration Guide
Step 3: Purchase Amazon Chime
4.
The new account has the account type Team.
Step 3: Purchase Amazon Chime
You can purchase Amazon Chime for yourself and for other users and pay a monthly fee per user. What
you pay depends on the subscription plan you choose. For more information, see Plans and pricing.
To purchase Amazon Chime
1.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
2.
On the Accounts page, select the name of your account.
3
Amazon Chime Administration Guide
Step 3: Purchase Amazon Chime
3.
On the Users page, choose Invite users.
4.
Type the email address that you (or your user) used to sign up for Amazon Chime and choose Invite
users.
5.
You (or your user) receives an email invitation to join the Amazon Chime team that you created. The
email recipient chooses Accept in the email invitation.
6.
After a user chooses Accept in the email invitation, they are granted an Amazon Chime Plus license.
If the user hasn't already downloaded the Amazon Chime client app (this can be done at any time),
they can choose Download Amazon Chime to download it and sign in.
7.
Repeat this procedure for each additional user that you want to invite.
If the user has already signed up for an Amazon Chime trial, use the email address that the user used
to sign up for Amazon Chime. Otherwise, use the work email address of the user.
4
Amazon Chime Administration Guide
Step 3: Purchase Amazon Chime
By default, users are granted an Amazon Chime Plus license. Use the following procedure to upgrade
from an Amazon Chime Plus license to an Amazon Chime Pro license.
To update from a Plus license to a Pro license
1.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
2.
On the Accounts page, select the name of your account.
3.
On the Users page, select the checkbox next to your email address.
4.
Choose User actions, Grant Pro license.
5
Amazon Chime Administration Guide
Invite Users
Manage Users for an Amazon Chime
Team Account
After you create an Amazon Chime team account, you can invite and remove users. With a team account,
you can use the Amazon Chime console to invite users from any email domain.
Alternatively, if the users are from your organization's domain, you can convert your team account
to an enterprise account. With an enterprise account, you can send an invitation to the users in your
organization and provide them with instructions to create their own Amazon Chime accounts. For more
information, see Manage Users for an Amazon Chime Enterprise Account (p. 8).
Contents
• Invite Users (p. 6)
• Remove Users (p. 6)
Invite Users
Use the following procedure to invite users to join a team account.
To invite users to a team account
1.
2.
3.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
On the Accounts page, select the name of the team account.
On the Users page, choose Invite users.
4.
Type the email addresses of the users to invite and then choose Invite users.
Remove Users
Use the following procedure to remove users from a team account. This disassociates the from the
account and removes any license that you purchased for them. The user can still access Amazon Chime,
but is no longer a paid member of your Amazon Chime account.
To remove users from a team account
1.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
6
Amazon Chime Administration Guide
Remove Users
2.
3.
On the Accounts page, select the name of the team account.
On the Users page, select the users to remove and choose User actions, Remove user.
7
Amazon Chime Administration Guide
Invite Users
Manage Users for an Amazon Chime
Enterprise Account
After you create an Amazon Chime team account, you can convert it to an enterprise account, connect
the account to your Active Directory so that your users can log in to Amazon Chime using their directory
credentials, and invite and remove users.
Contents
• Invite Users (p. 8)
• Suspend Users (p. 8)
• Convert a Team Account to an Enterprise Account (p. 9)
• Connect to Your Active Directory (p. 9)
Invite Users
Send an invitation email to the users in your organization and instruct them to follow the steps in Create
an Amazon Chime Account in the Amazon Chime User Guide.
Note
Users must use an email address with the domain that you claimed for your account.
After the users complete the steps to create their Amazon Chime accounts, they automatically appear on
the Users page for the enterprise account.
Suspend Users
Use the following procedure to suspend users from an enterprise account. This prevents them users from
logging in to Amazon Chime.
To suspend users from an enterprise account
1.
2.
3.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
On the Accounts page, select the name of the enterprise account.
On the Users page, select the users to suspend and choose User actions, Suspend users.
8
Amazon Chime Administration Guide
Convert a Team Account to an Enterprise Account
Convert a Team Account to an Enterprise Account
Use the following steps to convert a team account to an enterprise account.
To convert a team account to an enterprise account
1.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
2.
On the Accounts page, select the name of the team account.
3.
In the navigation pane, choose Settings, Claimed domains.
4.
On the Claimed domains page, choose Claim a new domain.
5.
For Domain, type the domain that your organization uses for email addresses. Choose Verify this
domain.
6.
Follow the directions on the screen to add a TXT record to the DNS server for your domain. In
general, the process involves signing in to your domain's account, finding the DNS records for your
domain, and adding a TXT record with the name and value provided by Amazon Chime. For more
information about updating the DNS records for your domain, see the documentation for your DNS
provider or domain name registrar.
Amazon Chime checks for the existence of this record to verify that you own the domain. After the
domain is verified, its status changes from Pending verification to Verified.
Note
Propagation of the DNS change and verification by Amazon Chime can take up to 24 hours.
7.
If your organization uses additional domains or subdomains for email addresses, repeat this
procedure for each domain.
Connect to Your Active Directory
You can connect your Amazon Chime account with your organization's Active Directory.
Benefits
Using your Active Directory has the following benefits:
9
Amazon Chime Administration Guide
Connect to Active Directory
• Amazon Chime users can sign in with their Active Directory credentials.
• Administrators can choose which credential security features to add, including password rotation,
password complexity rules, and multi-factor authorization.
• When users accounts are disabled in your Active Directory, their Amazon Chime accounts are
automatically disabled.
• You can specify which Active Directory groups receive Plus or Pro licenses.
• Multiple groups can be configured to receive Plus or Pro licenses.
• Users that are not members of either group can't sign into Amazon Chime.
• Users in both groups receive a Pro license.
Requirements
Before you can add your Active Directory to Amazon Chime, you must complete the following
requirements:
• Set up a directory with AWS Directory Service that is configured in the US East (N. Virginia) region. For
more information, see the AWS Directory Service Administration Guide. Note that Amazon Chime can
connect using AD Connector or Microsoft AD.
• Set up an Amazon Chime enterprise account. For more information, see Convert a Team Account to an
Enterprise Account (p. 9).
After you add a directory to Amazon Chime, when users log in using an email address from one of the
domains that you added to your Amazon Chime enterprise account, they are prompted to log in with
their directory credentials.
To add a directory
1.
2.
3.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
In the navigation pane, Settings, Active directory.
For Cloud directory ID, select the AWS Directory Service directory to use for Amazon Chime, and
then choose Connect.
Note
4.
5.
You can find your directory ID using the AWS Directory Service console.
After your directory has been connected, choose Add a new group. For Group, type a name for the
group. For License, select Plus or Pro. Choose Add Group.
Repeat this procedure to create additional directory groups.
10
Amazon Chime Administration Guide
Manage Amazon Chime Licenses
When a user subscribes to Amazon Chime, they receive a Amazon Chime Plus license or a Amazon Chime
Pro license. You can change the license for a user at any time.
To manage Amazon Chime licenses
1.
2.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
On the Accounts page, select the name of the Amazon Chime account.
3.
4.
In the navigation pane, choose Users.
To upgrade users from a Amazon Chime Plus license to a Amazon Chime Pro license, select the
checkboxes for the users and then choose User actions, Grant Pro license.
To downgrade users from a Amazon Chime Pro license to a Amazon Chime Plus license, select the
checkboxes for the users and then choose User actions, Revoke Pro license.
5.
11
Amazon Chime Administration Guide
Change Amazon Chime Personal
Meeting PINs
A personal meeting PIN is a custom ID that makes it easier for a Amazon Chime user to schedule
meetings with other Amazon Chime users. Using a personal meeting PIN means that meeting organizers
don't have to remember meeting details for each new meeting that they schedule.
After you update a personal meeting PIN, the user must update all meetings that were scheduled using
the old personal meeting PIN.
To change a personal meeting PIN
1.
2.
Open the Amazon Chime console at https://console.chime.aws.amazon.com/.
On the Accounts page, select the name of the Amazon Chime account.
3.
4.
5.
In the navigation pane, choose Users.
Select the checkbox for the user.
Choose User actions, Update Meeting PIN, Confirm.
12
Amazon Chime Administration Guide
Amazon Chime Actions
Control Access to the Amazon Chime
Console
Access to the Amazon Chime console is managed through IAM. By default, IAM users in your AWS
account have access to manage your Amazon Chime accounts. To restrict the access IAM users have to
Amazon Chime, create IAM policies that grant permissions to perform specific actions, such as changing
license types, then attach those policies to the IAM users or groups that require those permissions.
For more information about IAM policies, see Access Management. For more information about
managing and creating custom IAM policies, see Working with Policies.
Amazon Chime Actions
The following is the complete list of Amazon Chime actions.
Action
Description
Accounts
Chime:CreateAccount
Creates a new Amazon Chime account.
Chime:RenameAccount
Modifies the account name for your Amazon Chime enterprise or
team account.
Chime:ListAccounts
Lists the Amazon Chime accounts associated with your AWS
account.
Chime:GetAccount
Gets the account details for an Amazon Chime account.
Chime:DeleteAccount
Deletes an Amazon Chime account.
Users
Chime:CountUsers
Counts the users in an Amazon Chime account.
Chime:GetAccountSettings
Shows your Amazon Chime account settings.
Chime:UpdateAccountSettings
Modifies your Amazon Chime account settings.
13
Amazon Chime Administration Guide
Example: Full Console Access
Action
Description
Chime:ListUsers
Lists the users in an Amazon Chime account.
Chime:GetUser
Gets the user details for an Amazon Chime user.
Chime:GetUserByEmail
Gets user details for an Amazon Chime user based on the email
address in an Amazon Chime enterprise or team account.
Chime:InviteUsers
Invites new users to an Amazon Chime account.
Chime:SuspendUsers
Suspend users from an Amazon Chime enterprise account.
Chime:ActivateUsers
Activates users in an Amazon Chime enterprise account.
Chime:UpdateUserLicenses
Manages the licenses for your Amazon Chime users.
Chime:ResetPersonalPin
Resets the personal meeting PIN for an Amazon Chime user.
Domains
Chime:ListDomains
Lists domains associated with your Amazon Chime account.
Chime:AddDomain
Adds a domain to your Amazon Chime account.
Chime:GetDomain
Shows domain details for a domain associated with your Amazon
Chime account.
Chime:DeleteDomain
Deletes a domain from your Amazon Chime account.
Directories
Chime:ListDirectories
Lists active Active Directories hosted in the Directory Service of your
AWS account.
Chime:ConnectDirectory
Connects an Active Directory to your Amazon Chime enterprise
account.
Chime:DisconnectDirectory
Disconnects the Active Directory from your Amazon Chime
enterprise account.
Chime:ListGroups
Lists Active Directory user groups associated with your Amazon
Chime enterprise account.
Chime:AddOrUpdateGroups
Adds new or updates existing Active Directory user groups
associated with your Amazon Chime enterprise account.
Chime:DeleteGroups
Deletes Active Directory user groups from your Amazon Chime
enterprise account.
Example: Full Console Access
The following policy statement grants an IAM user full access to the Amazon Chime console.
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"Chime:*"
14
Amazon Chime Administration Guide
Example: Read-only Console Access
}
]
}
],
"Effect": "Allow",
"Resource": "*"
Example: Read-only Console Access
The following policy statement grants IAM users read-only access to the Amazon Chime console. They
can see all of the users, their current status, and their personal meeting PINs, but not make any changes.
{
}
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"Chime:ListAccounts",
"Chime:GetAccount",
"Chime:GetAccountSettings",
"Chime:ListUsers",
"Chime:GetUser",
"Chime:GetUserByEmail",
"Chime:ListDomains",
"Chime:GetDomain",
"Chime:ListGroups"
]
}
],
"Effect": "Allow",
"Resource": "*"
15
Amazon Chime Administration Guide
Contact Support for Amazon Chime
If you are an administrator and need to contact support for Amazon Chime, choose one of the following
options:
• If you have premium support, go to Support Center and submit a ticket.
• Otherwise, open the AWS Management Console and choose Amazon Chime, Support, Submit
request.
It's helpful to provide the following information:
• A detailed description of the issue.
• The time the issue occurred, including your time zone.
• Your Amazon Chime version. To find your version number:
• In Windows, choose Help, About Amazon Chime.
• In OSX, choose Amazon Chime, About Amazon Chime.
• In iOS and Android, choose Settings, About.
• The Log Reference ID. To find this ID:
• In Windows and OSX, choose Help, Send Diagnostic Logs.
• In iOS and Android, choose Settings, Send Diagnostic Logs.
• If your issue is related to a meeting, the Meeting ID.
16
Amazon Chime Administration Guide
Document History for Amazon
Chime
The following table describes the documentation for this release of Amazon Chime.
• Latest documentation update: May 5, 2017
Change
Description
Date
Configure Amazon Chime
to interact with your Active
Directory
Connect to Your Active
Directory (p. 9)
May 5, 2017
Initial release
Initial release
February 14, 2017
17
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement