57 actions in the sso-directory service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to add a member to a group in the directory that AWS IAM Identity Center provides by default
Grants permission to complete the creation process of a virtual MFA device
Grants permission to complete the registration process of a WebAuthn device
Grants permission to create an alias for the directory that AWS IAM Identity Center provides by default
Grants permission to create a bearer token for a given provisioning tenant
Grants permission to create an External Identity Provider configuration for the directory
Grants permission to create a group in the directory that AWS IAM Identity Center provides by default
Grants permission to create a provisioning tenant for a given directory
Grants permission to create a user in the directory that AWS IAM Identity Center provides by default
Grants permission to delete a bearer token
Grants permission to delete the given external IdP certificate
Grants permission to delete an External Identity Provider configuration associated with the directory
Grants permission to delete a group from the directory that AWS IAM Identity Center provides by default
Grants permission to delete a MFA device by device name for a given user
Grants permission to delete the provisioning tenant
Grants permission to delete a user from the directory that AWS IAM Identity Center provides by default
Grants permission to retrieve information about the directory that AWS IAM Identity Center provides by default
Grants permission to query the group data, not including user and group members
Grants permission to retrieve information about groups from the directory that AWS IAM Identity Center provides by default
Grants permission to describes the provisioning tenant
Grants permission to retrieve information about a user from the directory that AWS IAM Identity Center provides by default
Grants permission to describe user with a valid unique attribute represented for the user
Grants permission to retrieve information about user from the directory that AWS IAM Identity Center provides by default
Grants permission to disable authentication of end users with an External Identity Provider
Grants permission to deactivate a user in the directory that AWS IAM Identity Center provides by default
Grants permission to enable authentication of end users with an External Identity Provider
Grants permission to activate user in the directory that AWS IAM Identity Center provides by default
Grants permission to retrieve the AWS IAM Identity Center Service Provider configurations for the directory
Grants permission to retrieve ID information about group from the directory that AWS IAM Identity Center provides by default
Grants permission to retrieve ID information about user from the directory that AWS IAM Identity Center provides by default
(Deprecated) Grants permission to get UserPool Info
Grants permission to import the IdP certificate used for verifying external IdP responses
Grants permission to check if a member is a part of the group in the directory that AWS IAM Identity Center provides by default
Grants permission to check if a member is a part of multiple groups in the directory that AWS IAM Identity Center provides by default
Grants permission to list bearer tokens for a given provisioning tenant
Grants permission to list the external IdP certificates of a given directory and IdP
Grants permission to list all the External Identity Provider configurations created for the directory
Grants permission to list groups from the directory that AWS IAM Identity Center provides by default
Grants permission to list groups of the target member
Grants permission to list groups for a user from the directory that AWS IAM Identity Center provides by default
Grants permission to retrieve all members that are part of a group in the directory that AWS IAM Identity Center provides by default
Grants permission to list all active MFA devices and their MFA device metadata for a user
Grants permission to list provisioning tenants for a given directory
Grants permission to list users from the directory that AWS IAM Identity Center provides by default
Grants permission to remove a member that is part of a group in the directory that AWS IAM Identity Center provides by default
Grants permission to search for groups within the associated directory
Grants permission to search for users within the associated directory
Grants permission to begin the creation process of virtual mfa device
Grants permission to begin the registration process of a WebAuthn device
Grants permission to update an External Identity Provider configuration associated with the directory
Grants permission to update information about a group in the directory that AWS IAM Identity Center provides by default
Grants permission to update group display name update group display name response
Grants permission to update MFA device information
Grants permission to update a password by sending password reset link via email or generating one time password for a user in the directory that AWS IAM Identity Center provides by default
Grants permission to update user information in the directory that AWS IAM Identity Center provides by default
Grants permission to update user name update user name response
Grants permission to verify an email address of an User