# Viewing cost reports with Procurement insights
You use the **Procurement insights** dashboard to view cost-analysis and agreement data for all of the AWS accounts in your organization.
For example, you can use the dashboard to:
+ See the cost details of each AWS Marketplace purchase
+ Analyze data by dimensions such as vendor and product
+ Track cost trends over time
+ See upcoming renewals by date range, such as 30 or 60 days
+ View data by several categories, such as subscriber account or product title
+ Track agreement execution over time for auditing
+ Identify multiple instances of the same product
**Note**
You don't need an Quick subscription to use the dashboard.
You must have a full-featured organization. For more information, see [Enabling all features for an organization with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html)
Data from new AWS Marketplace purchases may take more than 24 hours to appear in the dashboard.
To create delegated administrators, you must belong to an AWS Organizations management account.
For more information about management accounts, see [Tutorial: Creating and configuring an organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tutorials_basic.html) and [Managing the management account with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs-manage_accounts_management.html), both in the *AWS Organizations User Guide*.
The following topics explain how to enable and use the dashboard, and how to create the dashboard programmatically.
**Topics**
+ [Enabling the Procurement insights dashboard](enabling-procurement-insights.md)
+ [Using the dashboard](using-the-dashboard.md)
+ [Using delegated administrators](management-delegates.md)
+ [Accessing the dashboard programmatically](management-access-with-apis.md)
# Enabling the Procurement insights dashboard
The following sections explain how to meet the general prerequisites for enabling the **Procurement insights** dashboard, and how to activate it.
If you need assistance with any part of this section, contact your AWS administrator.
**Topics**
+ [Dashboard prerequisites](#dashboard-prereqs)
+ [Activating the dashboard](#integrate-dashboard)
+ [For administrators: example policy](#procurement-sec-policy)
## Dashboard prerequisites
To set up and enable the **Procurement insights** dashboard, you must have the following prerequisites:
+ All features enabled for your organization. For more information, see [Enabling all features for an organization with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html), in the *AWS Organizations User Guide*.
+ Create the service-linked role and enable **Trusted access** in AWS Marketplace settings.
+ The following enablement permissions are required to enable the dashboards:
+ `iam:CreateServiceLinkedRole`
+ `organizations:DescribeOrganization`
+ `organizations:EnableAWSServiceAccess`
+ `organizations:ListAWSServiceAccessForOrganization`
+ `organizations:DeregisterDelegatedAdministrator`(Required to manage delegated admins)
+ `organizations:ListDelegatedAdministrators`(Required to manage delegated admins)
+ `organizations:RegisterDelegatedAdministrator`(Required to manage delegated admins)
+ The following permissions are required to view and interact with the dashboards:
+ `aws-marketplace:GetBuyerDashboard`
+ `organizations:DescribeOrganization`
**Note**
If you need help getting these permissions, contact your AWS administrator.
## Activating the dashboard
To activate dashboards, you must sign in to the AWS organization's management account with all features enabled. Your IAM user or role must have the permissions specified in [Dashboard prerequisites](https://docs.aws.amazon.com/marketplace/latest/buyerguide/enabling-procurement-insights.html#dashboard-prereqs).
**Important**
You or your AWS administrator must have a full-featured organization, and you must belong to an AWS Organizations management account to complete the following steps. For more information, see [Tutorial: Creating and configuring an organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tutorials_basic.html) and [Managing the management account with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs-manage_accounts_management.html), both in the *AWS Organizations User Guide*.
**To activate the dashboard**
1. Open the AWS Marketplace console at [https://console.aws.amazon.com/marketplace](https://console.aws.amazon.com/marketplace).
1. In the navigation pane, choose **Settings**.
1. Under **AWS Marketplace procurement insights**, choose **Enable trusted access**.
1. Select both checkboxes, **Enable trusted access across your organization**, and **Create a service-linked role for your organization**.
1. Choose **Create integration**.
Once you create the integration, the system creates the following service-linked roles and AWS managed policies:
+ [AWSServiceRoleForProcurementInsightsPolicy](buyer-service-linked-role-procurement.md) (later in this guide)
+ [AWS managed policy: AWSServiceRoleForProcurementInsightsPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSServiceRoleForProcurementInsightsPolicy.html) (*AWS Managed Policy Reference*)
**Important**
If you use the AWS command line interface (CLI) to active the dashboard, you must create the service-liked roles listed above before you enable trusted access. Otherwise, the activation process fails.
## For administrators: example policy
This example policy contains the permissions described in [Dashboard prerequisites](#dashboard-prereqs), earlier in this section.
------
#### [ JSON ]
****
```
{
"Version":"2012-10-17",
"Statement": [{
"Sid": "CreateServiceLinkedRoleForProcurementInsights",
"Effect": "Allow",
"Action": "iam:CreateServiceLinkedRole",
"Resource": "arn:aws:iam::*:role/aws-service-role/procurement-insights.marketplace.amazonaws.com/AWSServiceRoleForProcurementInsights*",
"Condition": {
"StringLike": {
"iam:AWSServiceName": "procurement-insights.marketplace.amazonaws.com"
}
}
},
{
"Sid": "EnableAWSServiceAccessForProcurementInsights",
"Effect": "Allow",
"Action": [
"organizations:EnableAWSServiceAccess"
],
"Resource": "*",
"Condition": {
"StringLike": {
"organizations:ServicePrincipal": "procurement-insights.marketplace.amazonaws.com"
}
}
},
{
"Sid": "ManageDelegatedAdministrators",
"Effect": "Allow",
"Action": [
"organizations:ListDelegatedAdministrators",
"organizations:DeregisterDelegatedAdministrator",
"organizations:RegisterDelegatedAdministrator"
],
"Resource": "*",
"Condition": {
"StringLike": {
"organizations:ServicePrincipal": "procurement-insights.marketplace.amazonaws.com"
}
}
},
{
"Sid": "GetBuyerDashboardStatement",
"Effect": "Allow",
"Action": "aws-marketplace:GetBuyerDashboard",
"Resource": "*"
},
{
"Sid": "ViewOrganizationDetails",
"Effect": "Allow",
"Action": [
"organizations:DescribeOrganization",
"organizations:ListAWSServiceAccessForOrganization"
],
"Resource": "*"
}
]
}
```
------
For more information about creating policies, see [Policies and permissions in AWS Identity and Access Management](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html), in the *IAM User Guide*.
# Using the dashboard
The following sections explain how to use the AWS Marketplace **Procurement insights** dashboard.
**Note**
To view data for all the accounts in your organization, you must belong to an AWS Organizations management account or a delegated administrator account.
For more information about management accounts, follow the [links in the introduction](procurement-insights.md) above. For more information about delegated administrators, see [Using delegated administrators](management-delegates.md), later in this section.
**Topics**
+ [Starting the dashboard](#start-agreements-dashboard)
+ [Tips for using the dashboard](#dashboard-tips)
## Starting the dashboard
You can use the **Procurement insights** dashboard in the AWS Marketplace console, or you can call it programmatically. When you use the dashboard in the console, it provides two tabs, **Cost analysis** and **Agreements**. The following steps explain how to open the dashboard in the console.
**To start the dashboard**
1. Open the AWS Marketplace console at [https://console.aws.amazon.com/marketplace](https://console.aws.amazon.com/marketplace).
1. In the navigation pane, choose **Procurement insights**.
1. Do either of the following:
+ Use the charts and graphs on the **Cost analysis** tab for information about the amounts spent on products and sellers.
+ Use the charts and graphs on the **Agreements** tab to gain an overall view of the AWS Marketplace agreements across all the AWS accounts in your organization.
**Important**
The tab's **Expired agreements** section only shows data for agreements that expired after the dashboard became available for use.
For more information about using Quick dashboards, see [Interacting with Quick dashboards](https://docs.aws.amazon.com/quicksight/latest/user/exploring-dashboards.html), in the *Quick User Guide*.
## Tips for using the dashboard
The following tips can help you use the **Procurement insights** dashboard.
+ The dashboard uses Quick to present your data. The system automatically chooses the charts and other display elements that most logically fit your data. For more information about using Quick dashboards, see [Interacting with Quick dashboards](https://docs.aws.amazon.com/quicksight/latest/user/exploring-dashboards.html), in the *Quick User Guide*.
+ You can download your data. Scroll down to the **Source data** table in either tab. Point to the upper-right corner of the table, then choose the vertical ellipsis to export your data. You can export to a CSV file, or to Microsoft Excel.
![\[The download control in the Source data table.\]](http://docs.aws.amazon.com/marketplace/latest/buyerguide/images/download-dashboard-data.png)
+ Both tabs use the same data filters. The filters on a given tab only apply to that tab, but they apply to all the charts and graphs on the tab. The following table lists the filters and their default values.
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/marketplace/latest/buyerguide/using-the-dashboard.html)
+ To change the default filter values, select the arrow on the right side of the **Controls** bar.
![\[Image of an arrow pointing down.\]](http://docs.aws.amazon.com/marketplace/latest/buyerguide/images/org-view-filter-arrow.png)
For more information about using Quick filters, see [Using filters on dashboard data](https://docs.aws.amazon.com/quicksight/latest/user/filtering-dashboard-data.html) and [Filtering data during your session](https://docs.aws.amazon.com/quicksight/latest/user/subscriber-dashboards-filtering-your-view-of-the-data.html), both in the *Quick User Guide*.
# Using delegated administrators
The steps in the following sections explain how to register and deregister delegated administrators. Delegated administrators can view all the data in your organization.
**Important**
You or your AWS administrator must enable all features for your organization, and you must belong to an AWS Organizations management account to complete the following steps. For more information, see [Tutorial: Creating and configuring an organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tutorials_basic.html) and [Managing the management account with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs-manage_accounts_management.html), both in the *AWS Organizations User Guide*.
**Topics**
+ [Registering delegated administrators](#management-register-delegate)
+ [Deregistering delegated administrators](#management-deregister-delegate)
## Registering delegated administrators
To create delegated administrators, you register an account ID, and everyone in that account can get a consolidated view of agreement and cost data.
**To register administrators**
1. Open the AWS Marketplace console at [https://console.aws.amazon.com/marketplace](https://console.aws.amazon.com/marketplace).
1. In the navigation pane, choose **Settings**.
1. Under **Delegated administrators**, choose **Register**.
The **Register delegated administrator** page appears.
1. In the **Account ID** box, enter the desired account ID.
1. Choose **Register**.
## Deregistering delegated administrators
The following steps explain how to deregister an account and prevent everyone in that account from seeing an overall view of your data.
**To deregister administrators**
1. Open the AWS Marketplace console at [https://console.aws.amazon.com/marketplace](https://console.aws.amazon.com/marketplace).
1. In the navigation pane, choose **Settings**.
1. Under **Delegated administrators**, select the radio button next to account that you want to deregister.
1. Choose **Deregister**.
1. In the **Deregister a delegate administrator** dialog box, choose **Deregister**.
# Accessing the dashboard programmatically
To create a **Procurement insights** dashboards programmatically, call the following API: [GetBuyerDashboard](https://docs.aws.amazon.com/marketplace/latest/APIReference/API_marketplace-reporting_GetBuyerDashboard.html).
**Important**
You must create the service-linked role listed in [Activating the dashboard](enabling-procurement-insights.md#integrate-dashboard) before you enable trusted access to the dashboard. Otherwise, the activation process fails.