chime:AddOrUpdateGroups is a Write access-level action in the chime service. Grants permission to add new or update existing Active Directory or Okta user groups associated with your Amazon Chime Enterprise account
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows chime:AddOrUpdateGroups. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowChimeAddOrUpdateGroups",
"Effect": "Allow",
"Action": "chime:AddOrUpdateGroups",
"Resource": "*"
}
]
}