2 actions in the consolidatedbilling service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to get account role (Payer, Linked, Regular)
Grants permission to get list of member/linked accounts