{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AWSGrafanaPermissions",
      "Effect": "Allow",
      "Action": [
        "grafana:DescribeWorkspace",
        "grafana:DescribeWorkspaceAuthentication",
        "grafana:UpdatePermissions",
        "grafana:ListPermissions",
        "grafana:ListWorkspaces"
      ],
      "Resource": "arn:aws:grafana:*:*:/workspaces*"
    },
    {
      "Sid": "IAMIdentityCenterPermissions",
      "Effect": "Allow",
      "Action": [
        "sso:DescribeRegisteredRegions",
        "sso:GetSharedSsoConfiguration",
        "sso:ListDirectoryAssociations",
        "sso:GetManagedApplicationInstance",
        "sso:ListProfiles",
        "sso:GetProfile",
        "sso:ListProfileAssociations",
        "sso-directory:DescribeUser",
        "sso-directory:DescribeGroup"
      ],
      "Resource": "*"
    }
  ]
}