@cloud-copilot/iam-data/data/actions/quicksight.json

AWS IAM Data

{
  "accountconfigurations": {
    "name": "AccountConfigurations",
    "isPermissionOnly": true,
    "description": "Grants permission to enable setting default access to AWS resources",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "batchcreatetopicreviewedanswer": {
    "name": "BatchCreateTopicReviewedAnswer",
    "description": "Grants permission to create reviewed answers for a topic",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "batchdeletetopicreviewedanswer": {
    "name": "BatchDeleteTopicReviewedAnswer",
    "description": "Grants permission to delete reviewed answers for a topic",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "cancelingestion": {
    "name": "CancelIngestion",
    "description": "Grants permission to cancel a SPICE ingestions on a dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ingestion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createaccountcustomization": {
    "name": "CreateAccountCustomization",
    "description": "Grants permission to create an account customization for QuickSight account or namespace",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createaccountsubscription": {
    "name": "CreateAccountSubscription",
    "description": "Grants permission to subscribe to QuickSight",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "quicksight:Edition",
      "quicksight:DirectoryType"
    ],
    "dependentActions": []
  },
  "createadmin": {
    "name": "CreateAdmin",
    "isPermissionOnly": true,
    "description": "Grants permission to provision Amazon QuickSight administrators, authors, and readers",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createanalysis": {
    "name": "CreateAnalysis",
    "description": "Grants permission to create an analysis from a template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "analysis",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createbrand": {
    "name": "CreateBrand",
    "description": "Grants permission to create an Amazon QuickSight brand",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "brand",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createcustompermissions": {
    "name": "CreateCustomPermissions",
    "description": "Grants permission to create a QuickSight custom permissions resource",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "custompermissions",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createdashboard": {
    "name": "CreateDashboard",
    "description": "Grants permission to create a QuickSight Dashboard",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dashboard",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createdataset": {
    "name": "CreateDataSet",
    "description": "Grants permission to create a dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "datasource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "quicksight:PassDataSource"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createdatasource": {
    "name": "CreateDataSource",
    "description": "Grants permission to create a data source",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:PassRole"
    ]
  },
  "createemailcustomizationtemplate": {
    "name": "CreateEmailCustomizationTemplate",
    "isPermissionOnly": true,
    "description": "Grants permission to create a QuickSight email customization template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "emailCustomizationTemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createfolder": {
    "name": "CreateFolder",
    "description": "Grants permission to create a QuickSight folder",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "folder",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createfoldermembership": {
    "name": "CreateFolderMembership",
    "description": "Grants permission to add a QuickSight Dashboard, Analysis or Dataset to a QuickSight Folder",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "folder",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "analysis",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dashboard",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dataset",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "creategroup": {
    "name": "CreateGroup",
    "description": "Grants permission to create a QuickSight group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "creategroupmembership": {
    "name": "CreateGroupMembership",
    "description": "Grants permission to add a QuickSight user to a QuickSight group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "group",
        "required": true,
        "conditionKeys": [
          "quicksight:UserName"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "createiampolicyassignment": {
    "name": "CreateIAMPolicyAssignment",
    "description": "Grants permission to create an assignment with one specified IAM Policy ARN that will be assigned to specified groups or users of QuickSight",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "assignment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createingestion": {
    "name": "CreateIngestion",
    "description": "Grants permission to start a SPICE ingestion on a dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "ingestion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createnamespace": {
    "name": "CreateNamespace",
    "description": "Grants permission to create an QuickSight namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "namespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ds:CreateIdentityPoolDirectory"
    ]
  },
  "createreader": {
    "name": "CreateReader",
    "isPermissionOnly": true,
    "description": "Grants permission to provision Amazon QuickSight readers",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createrefreshschedule": {
    "name": "CreateRefreshSchedule",
    "description": "Grants permission to create a refresh schedule for a dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "refreshschedule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createrolemembership": {
    "name": "CreateRoleMembership",
    "description": "Grants permission to add a group member to a role",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "quicksight:Group",
      "identitystore:GroupId"
    ],
    "dependentActions": []
  },
  "createtemplate": {
    "name": "CreateTemplate",
    "description": "Grants permission to create a template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "template",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createtemplatealias": {
    "name": "CreateTemplateAlias",
    "description": "Grants permission to create a template alias",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "template",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createtheme": {
    "name": "CreateTheme",
    "description": "Grants permission to create a theme",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "theme",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createthemealias": {
    "name": "CreateThemeAlias",
    "description": "Grants permission to create an alias for a theme version",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "theme",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createtopic": {
    "name": "CreateTopic",
    "description": "Grants permission to create a topic",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": [
          "quicksight:PassDataSet"
        ]
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "createtopicrefreshschedule": {
    "name": "CreateTopicRefreshSchedule",
    "description": "Grants permission to create a refresh schedule for a topic",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createuser": {
    "name": "CreateUser",
    "isPermissionOnly": true,
    "description": "Grants permission to provision Amazon QuickSight authors and readers",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createvpcconnection": {
    "name": "CreateVPCConnection",
    "description": "Grants permission to create a vpc connection",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "iam:PassRole"
    ]
  },
  "deleteaccountcustomization": {
    "name": "DeleteAccountCustomization",
    "description": "Grants permission to delete an account customization for QuickSight account or namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "customization",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteaccountsubscription": {
    "name": "DeleteAccountSubscription",
    "description": "Grants permission to delete a QuickSight account",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "account",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteanalysis": {
    "name": "DeleteAnalysis",
    "description": "Grants permission to delete an analysis",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "analysis",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletebrand": {
    "name": "DeleteBrand",
    "description": "Grants permission to delete an Amazon QuickSight brand",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "brand",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletebrandassignment": {
    "name": "DeleteBrandAssignment",
    "description": "Grants permission to delete a brand assignment",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletecustompermissions": {
    "name": "DeleteCustomPermissions",
    "description": "Grants permission to delete a QuickSight custom permissions resource",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedashboard": {
    "name": "DeleteDashboard",
    "description": "Grants permission to delete a QuickSight Dashboard",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dashboard",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedataset": {
    "name": "DeleteDataSet",
    "description": "Grants permission to delete a dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deletedatasetrefreshproperties": {
    "name": "DeleteDataSetRefreshProperties",
    "description": "Grants permission to delete dataset refresh properties for a dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedatasource": {
    "name": "DeleteDataSource",
    "description": "Grants permission to delete a data source",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "datasource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deletedefaultqbusinessapplication": {
    "name": "DeleteDefaultQBusinessApplication",
    "description": "Grants permission to delete linked QBusiness application for QuickSight account",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteemailcustomizationtemplate": {
    "name": "DeleteEmailCustomizationTemplate",
    "isPermissionOnly": true,
    "description": "Grants permission to delete a QuickSight email customization template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "emailCustomizationTemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletefolder": {
    "name": "DeleteFolder",
    "description": "Grants permission to delete a QuickSight Folder",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "folder",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletefoldermembership": {
    "name": "DeleteFolderMembership",
    "description": "Grants permission to remove a QuickSight Dashboard, Analysis or Dataset from a QuickSight Folder",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "folder",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "analysis",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dashboard",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dataset",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletegroup": {
    "name": "DeleteGroup",
    "description": "Grants permission to remove a user group from QuickSight",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletegroupmembership": {
    "name": "DeleteGroupMembership",
    "description": "Grants permission to remove a user from a group so that he/she is no longer a member of the group",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "quicksight:UserName"
    ],
    "dependentActions": []
  },
  "deleteiampolicyassignment": {
    "name": "DeleteIAMPolicyAssignment",
    "description": "Grants permission to update an existing assignment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "assignment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteidentitypropagationconfig": {
    "name": "DeleteIdentityPropagationConfig",
    "description": "Grants permission to remove AWS services for trusted identity propagation in QuickSight",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletenamespace": {
    "name": "DeleteNamespace",
    "description": "Grants permission to delete a QuickSight namespace",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "namespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": [
      "ds:DeleteDirectory"
    ]
  },
  "deleterefreshschedule": {
    "name": "DeleteRefreshSchedule",
    "description": "Grants permission to delete a refresh schedule for a dataset",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "refreshschedule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleterolecustompermission": {
    "name": "DeleteRoleCustomPermission",
    "description": "Grants permission to remove the custom permission associated with a role",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleterolemembership": {
    "name": "DeleteRoleMembership",
    "description": "Grants permission to remove a group member from a role",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "quicksight:Group",
      "identitystore:GroupId"
    ],
    "dependentActions": []
  },
  "deletetemplate": {
    "name": "DeleteTemplate",
    "description": "Grants permission to delete a template",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "template",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetemplatealias": {
    "name": "DeleteTemplateAlias",
    "description": "Grants permission to delete a template alias",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "template",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetheme": {
    "name": "DeleteTheme",
    "description": "Grants permission to delete a theme",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "theme",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletethemealias": {
    "name": "DeleteThemeAlias",
    "description": "Grants permission to delete the alias of a theme",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "theme",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletetopic": {
    "name": "DeleteTopic",
    "description": "Grants permission to delete a topic",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "deletetopicrefreshschedule": {
    "name": "DeleteTopicRefreshSchedule",
    "description": "Grants permission to delete a refresh schedule for a topic",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteuser": {
    "name": "DeleteUser",
    "description": "Grants permission to delete a QuickSight user, given the user name",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteuserbyprincipalid": {
    "name": "DeleteUserByPrincipalId",
    "description": "Grants permission to deletes a user identified by its principal ID",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteusercustompermission": {
    "name": "DeleteUserCustomPermission",
    "description": "Grants permission to remove the custom permission associated with a user",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletevpcconnection": {
    "name": "DeleteVPCConnection",
    "description": "Grants permission to delete a vpc connection",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "vpcconnection",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describeaccountcustomization": {
    "name": "DescribeAccountCustomization",
    "description": "Grants permission to describe an account customization for QuickSight account or namespace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "customization",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeaccountsettings": {
    "name": "DescribeAccountSettings",
    "description": "Grants permission to describe the administrative account settings for QuickSight account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeaccountsubscription": {
    "name": "DescribeAccountSubscription",
    "description": "Grants permission to describe a QuickSight account",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "account",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeanalysis": {
    "name": "DescribeAnalysis",
    "description": "Grants permission to describe an analysis",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "analysis",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeanalysispermissions": {
    "name": "DescribeAnalysisPermissions",
    "description": "Grants permission to describe permissions for an analysis",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "analysis",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeassetbundleexportjob": {
    "name": "DescribeAssetBundleExportJob",
    "description": "Grants permission to describe an asset bundle export job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "assetBundleExportJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeassetbundleimportjob": {
    "name": "DescribeAssetBundleImportJob",
    "description": "Grants permission to describe an asset bundle import job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "assetBundleImportJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describebrand": {
    "name": "DescribeBrand",
    "description": "Grants permission to describe a brand",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "brand",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describebrandassignment": {
    "name": "DescribeBrandAssignment",
    "description": "Grants permission to describe a brand assignment",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describebrandpublishedversion": {
    "name": "DescribeBrandPublishedVersion",
    "description": "Grants permission to describes the published version of the brand",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "brand",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describecustompermissions": {
    "name": "DescribeCustomPermissions",
    "description": "Grants permission to describe a custom permissions resource in a QuickSight account",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "custompermissions",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedashboard": {
    "name": "DescribeDashboard",
    "description": "Grants permission to describe a QuickSight Dashboard",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dashboard",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedashboardpermissions": {
    "name": "DescribeDashboardPermissions",
    "description": "Grants permission to describe permissions for a QuickSight Dashboard",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dashboard",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedashboardsnapshotjob": {
    "name": "DescribeDashboardSnapshotJob",
    "description": "Grants permission to describe a dashboard snapshot job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dashboardSnapshotJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedashboardsnapshotjobresult": {
    "name": "DescribeDashboardSnapshotJobResult",
    "description": "Grants permission to describe result of a dashboard snapshot job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dashboardSnapshotJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedashboardsqaconfiguration": {
    "name": "DescribeDashboardsQAConfiguration",
    "description": "Grants permission to describe dashboards qa configuration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedataset": {
    "name": "DescribeDataSet",
    "description": "Grants permission to describe a dataset",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describedatasetpermissions": {
    "name": "DescribeDataSetPermissions",
    "description": "Grants permission to describe the resource policy of a dataset",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describedatasetrefreshproperties": {
    "name": "DescribeDataSetRefreshProperties",
    "description": "Grants permission to describe refresh properties for a dataset",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dataset",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describedatasource": {
    "name": "DescribeDataSource",
    "description": "Grants permission to describe a data source",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "datasource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describedatasourcepermissions": {
    "name": "DescribeDataSourcePermissions",
    "description": "Grants permission to describe the resource policy of a data source",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "datasource",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describedefaultqbusinessapplication": {
    "name": "DescribeDefaultQBusinessApplication",
    "description": "Grants permission to describe linked QBusiness application Id for QuickSight account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeemailcustomizationtemplate": {
    "name": "DescribeEmailCustomizationTemplate",
    "isPermissionOnly": true,
    "description": "Grants permission to describe a QuickSight email customization template",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "emailCustomizationTemplate",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describefolder": {
    "name": "DescribeFolder",
    "description": "Grants permission to describe a QuickSight Folder",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "folder",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describefolderpermissions": {
    "name": "DescribeFolderPermissions",
    "description": "Grants permission to describe permissions for a QuickSight Folder",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "folder",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describefolderresolvedpermissions": {
    "name": "DescribeFolderResolvedPermissions",
    "description": "Grants permission to describe resolved permissions for a QuickSight Folder",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "folder",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describegroup": {
    "name": "DescribeGroup",
    "description": "Grants permission to describe a QuickSight group",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describegroupmembership": {
    "name": "DescribeGroupMembership",
    "description": "Grants permission to describe a QuickSight group member",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "group",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "quicksight:UserName"
    ],
    "dependentActions": []
  },
  "describeiampolicyassignment": {
    "name": "DescribeIAMPolicyAssignment",
    "description": "Grants permission to describe an existing assignment",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "assignment",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeingestion": {
    "name": "DescribeIngestion",
    "description": "Grants permission to describe a SPICE ingestion on a dataset",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "ingestion",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describeiprestriction": {
    "name": "DescribeIpRestriction",
    "description": "Grants permission to describe the IP restrictions for QuickSight account",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describekeyregistration": {
    "name": "DescribeKeyRegistration",
    "description": "Grants permission to describe QuickSight key registration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describenamespace": {
    "name": "DescribeNamespace",
    "description": "Grants permission to describe a QuickSight namespace",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "namespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeqpersonalizationconfiguration": {
    "name": "DescribeQPersonalizationConfiguration",
    "description": "Grants permission to describe a personalization configuration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describequicksightqsearchconfiguration": {
    "name": "DescribeQuickSightQSearchConfiguration",
    "description": "Grants permission to describe QuickSight Q Search configuration",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describerefreshschedule": {
    "name": "DescribeRefreshSchedule",
    "description": "Grants permission to describe a refresh schedule for a dataset",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "refreshschedule",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describerolecustompermission": {
    "name": "DescribeRoleCustomPermission",
    "description": "Grants permission to describe the custom permission associated with a role",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describetemplate": {
    "name": "DescribeTemplate",
    "description": "Grants permission to describe a template",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "template",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describetemplatealias": {
    "name": "DescribeTemplateAlias",
    "description": "Grants permission to describe a template alias",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "template",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describetemplatepermissions": {
    "name": "DescribeTemplatePermissions",
    "description": "Grants permission to describe permissions for a template",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "template",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describetheme": {
    "name": "DescribeTheme",
    "description": "Grants permission to describe a theme",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "theme",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describethemealias": {
    "name": "DescribeThemeAlias",
    "description": "Grants permission to describe a theme alias",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "theme",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describethemepermissions": {
    "name": "DescribeThemePermissions",
    "description": "Grants permission to describe permissions for a theme",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "theme",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describetopic": {
    "name": "DescribeTopic",
    "description": "Grants permission to describe a topic",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describetopicpermissions": {
    "name": "DescribeTopicPermissions",
    "description": "Grants permission to describe the resource policy of a topic",
    "accessLevel": "Permissions management",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describetopicrefresh": {
    "name": "DescribeTopicRefresh",
    "description": "Grants permission to describe the refresh status of a topic",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "describetopicrefreshschedule": {
    "name": "DescribeTopicRefreshSchedule",
    "description": "Grants permission to describe a refresh schedule for a topic",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "topic",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describeuser": {
    "name": "DescribeUser",
    "description": "Grants permission to describe a QuickSight user given the user name",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "describevpcconnection": {
    "name": "DescribeVPCConnection",
    "description": "Grants permission to describe a vpc connection",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "vpcconnection",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "generateembedurlforanonymoususer": {
    "name": "GenerateEmbedUrlForAnonymousUser",
    "description": "Grants permission to generate a URL used to embed a QuickSight Dashboard or Q Topic for a user not registered with QuickSight",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "namespace",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "dashboard",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "theme",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "topic",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}",
      "quicksight:AllowedEmbeddingDomains"
    ],
    "dependentActions": []
  },
  "generateembedurlforregistereduser": {
    "name": "GenerateEmbedUrlForRegisteredUser",
    "description": "Grants permission to generate a URL used to embed a QuickSight Dashboard for a user registered with QuickSight",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "quicksight:AllowedEmbeddingDomains"
    ],
    "dependentActions": []
  },
  "generateembedurlforregistereduserwithidentity": {
    "name": "GenerateEmbedUrlForRegisteredUserWithIdentity",
    "description": "Grants permission to generate a URL used to embed a QuickSight Experience for a user registered with QuickSight using Identity-enhanced role session",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "quicksight:AllowedEmbeddingDomains"
    ],
    "dependentActions": []
  },
  "getanonymoususerembedurl": {
    "name": "GetAnonymousUserEmbedUrl",
    "isPermissionOnly": true,
    "description": "Grants permission to get a URL used to embed a QuickSight Dashboard for a user not registered with QuickSight",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getauthcode": {
    "name": "GetAuthCode",
    "isPermissionOnly": true,
    "description": "Grants permission to get an auth code representing a QuickSight user",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "user",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdashboardembedurl": {
    "name": "GetDashboardEmbedUrl",
    "description": "Grants permission to get a URL used to embed a QuickSight Dashboard",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "dashboard",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getgroupmapping": {
    "name": "GetGroupMapping",
    "isPermissionOnly": true,
    "description": "Grants permission to use Amazon QuickSight, in Enterprise edition, to identify and display the Microsoft Active Directory (Microsoft Active Directory) directory groups that are mapped to roles in Amazon QuickSight",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsessionembedurl": {
    "name": "GetSessionEmbedUrl",
    "description": "Grants permission to get a URL to embed QuickSight console experience",
    "accessLevel": "Read",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listanalyses": {
    "name": "ListAnalyses",
    "description": "Grants permission to list all analyses in an account",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "analysis",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassetbundleexportjobs": {
    "name": "ListAssetBundleExportJobs",
    "description": "Grants permission to list all asset bundle export jobs",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "assetBundleExportJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listassetbundleimportjobs": {
    "name": "ListAssetBundleImportJobs",
    "description": "Grants permission to list all asset bundle import jobs",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "assetBundleImportJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listbrands": {
    "name": "ListBrands",
    "description": "G