Amazon QuickSight now supports programmatic user access management by assigning groups to roles