quicksight:GetGroupMapping is a Read access-level action in the quicksight service. Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows quicksight:GetGroupMapping. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowQuicksightGetGroupMapping",
"Effect": "Allow",
"Action": "quicksight:GetGroupMapping",
"Resource": "*"
}
]
}