identitystore

27 actions in the identitystore service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

identitystore:AddRegion

Write

Grants permission to add a region to an IdentityStore

identitystore:CreateGroup

Write

Grants permission to create a group in the specified IdentityStore

identitystore:CreateGroupMembership

Write

Grants permission to create a member to a group in the specified IdentityStore

identitystore:CreateIdentityStore

Write

Grants permission to create a new IdentityStore in an AWS account

identitystore:CreateUser

Write

Grants permission to create a user in the specified IdentityStore

identitystore:DeleteGroup

Write

Grants permission to delete a group in the specified IdentityStore

identitystore:DeleteGroupMembership

Write

Grants permission to remove a member that is part of a group in the specified IdentityStore

identitystore:DeleteIdentityStore

Write

Grants permission to delete an IdentityStore

identitystore:DeleteUser

Write

Grants permission to delete a user in the specified IdentityStore

identitystore:DescribeGroup

Read

Grants permission to retrieve information about a group in the specified IdentityStore

identitystore:DescribeGroupMembership

Read

Grants permission to retrieve information about a member that is part of a group in the specified IdentityStore

identitystore:DescribeRegion

Read

Grants permission to retrieve configuration details for a specific IdentityStore region

identitystore:DescribeUser

Read

Grants permission to retrieve information about user in the specified IdentityStore

identitystore:GetGroupId

Read

Grants permission to retrieve ID information about group in the specified IdentityStore

identitystore:GetGroupMembershipId

Read

Grants permission to retrieve ID information of a member which is part of a group in the specified IdentityStore

identitystore:GetUserId

Read

Grants permission to retrieves ID information about user in the specified IdentityStore

identitystore:IsMemberInGroups

Read

Grants permission to check if a member is a part of groups in the specified IdentityStore

identitystore:ListGroupMemberships

List

Grants permission to retrieve all members that are part of a group in the specified IdentityStore

identitystore:ListGroupMembershipsForMember

List

Grants permission to list groups of the target member in the specified IdentityStore

identitystore:ListGroups

List

Grants permission to search for groups within the specified IdentityStore

identitystore:ListRegions

List

Grants permission to list all regions configured for an IdentityStore

identitystore:ListUsers

List

Grants permission to search for users in the specified IdentityStore

identitystore:RemoveRegion

Write

Grants permission to remove a region from an IdentityStore

identitystore:ReserveUser

Write

Grants permission to reserve a user by getting a userId

identitystore:UpdateGroup

Write

Grants permission to update information about a group in the specified IdentityStore

identitystore:UpdateIdentityStore

Write

Grants permission to update the configuration of an IdentityStore

identitystore:UpdateUser

Write

Grants permission to update user information in the specified IdentityStore