Job function policies
AWS describes managed policies for job functions on one IAM User Guide page, and separately labels some policies in its Managed Policy Reference Guide with the type Job function policy. The two sets overlap but are not identical, so they are listed separately here. The Job functions domain follows a third rule, the policy ARN path, so its count can differ from both.
On AWS's job functions page (12)
Source: AWS managed policies for job functions, IAM User Guide.
- AdministratorAccess
Provides full access to AWS services and resources.
High privilegeAdminAWS managed - AWSMcpServiceActionsFullAccess
Provides full access to all MCP service actions. This policy does not grant access to the actions taken by the MCP, only the MCP actions themselves.
OperatorAWS managed - AWSSupportAccess
Allows users to access the AWS Support Center.
AdminAWS managed - Billing
Grants permissions for billing and cost management. This includes viewing account usage and viewing and modifying budgets and payment methods.
AdminJob function - DatabaseAdministrator
Grants full access permissions to AWS services and actions required to set up and configure AWS database services.
High privilegeAdminJob function - DataScientist
Grants permissions to AWS data analytics services.
High privilegeAdminJob function - NetworkAdministrator
Grants full access permissions to AWS services and actions required to set up and configure AWS network resources.
AdminJob function - PowerUserAccess
Provides full access to AWS services and resources, but does not allow management of Users and groups.
High privilegeAdminAWS managed - ReadOnlyAccess
Provides read-only access to AWS services and resources.
OperatorAWS managed - SecurityAudit
The security audit template grants access to read security configuration metadata. It is useful for software that audits the configuration of an AWS account.
OperatorAWS managed - SystemAdministrator
Grants full access permissions necessary for resources required for application and development operations.
High privilegeAdminJob function - ViewOnlyAccess
This policy grants permissions to view resources and basic metadata across all AWS services.
OperatorJob function
Also typed Job function policy by AWS (9)
Source: the Type line on each policy's page in the AWS Managed Policy Reference Guide.
- AmazonODBAutonomousDatabaseAdmin
Provides administrative access to manage Autonomous Database resources in Oracle Database@AWS.
OperatorJob function - AmazonODBAutonomousVmClusterAdmin
Provides administrative access to manage Autonomous VM cluster resources in Oracle Database@AWS
OperatorJob function - AmazonODBExadataInfrastructureAdmin
Provides administrative access to manage Exadata Infrastructure resources in Oracle Database@AWS
OperatorJob function - AmazonODBExadataVmClusterAdmin
Provides administrative access to manage Exadata VM cluster resources in Oracle Database@AWS.
OperatorJob function - AmazonODBExascaleStorageVaultAdmin
Provides administrative access to manage Exascale storage vault resources in Oracle Database@AWS.
OperatorJob function - AmazonODBExascaleVmClusterAdmin
Provides administrative access to manage Exascale VM cluster resources in Oracle Database@AWS.
OperatorJob function - AmazonODBNetworkAdmin
Provides administrative access to networking resources for Oracle Database@AWS
OperatorJob function - AWSManagementConsoleAdministratorAccess
Provides full access to configure and customize the AWS Management Console
AdminJob function - SupportUser
This policy grants permissions to troubleshoot and resolve issues in an AWS account. This policy also enables the user to contact AWS support to create and manage cases.
AdminJob function