Skip to main content
IAM Policy Map

AWSPartnerCentralOpportunityManagement

OperatorAWS managedActivePermissions reviewedShow on mapCompare

Summary

Provides necessary access for opportunity management activities.

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN
arn:aws:iam::aws:policy/AWSPartnerCentralOpportunityManagement
Default version
v13
Created
Last edited
Services
aws-marketplace, partnercentral, partnercentral-account-management, q

Control-plane actions (64)

By access level: 16 List, 18 Read, 2 Tagging, 28 Write.

Control-plane actions by service
ServiceGrantedAccess levels and limitsGranted by
Marketplace2 of 971 List, 1 Read; 1 restricted, 0 conditionalaws-marketplace:DescribeEntity, aws-marketplace:ListEntities
Partner Central56 of 16415 List, 15 Read, 2 Tagging, 24 Write; 52 restricted, 51 conditionalpartnercentral:AcceptEngagementInvitation, partnercentral:AssignOpportunity, partnercentral:AssociateOpportunity, partnercentral:CreateCollaborationChannelMembers, partnercentral:CreateCollaborationChannelRequest, partnercentral:CreateEngagement, partnercentral:CreateEngagementContext, partnercentral:CreateEngagementInvitation, partnercentral:CreateOpportunity, partnercentral:CreateResourceSnapshot, partnercentral:CreateResourceSnapshotJob, partnercentral:DeleteResourceSnapshotJob and 44 more
Partner central account management1 of 61 Write; 1 restricted, 1 conditionalpartnercentral-account-management:AccessLegacyPartnerCentral
Q5 of 542 Read, 3 Write; 0 restricted, 0 conditionalq:GetConversation, q:ListConversations, q:PassRequest, q:SendMessage, q:StartConversation
Marketplace: 2 actions
  • aws-marketplace:DescribeEntity (Read)
  • aws-marketplace:ListEntities (List)
Partner Central: 56 actions
  • partnercentral:AcceptEngagementInvitation (Write)
  • partnercentral:AssignOpportunity (Write)
  • partnercentral:AssociateOpportunity (Write)
  • partnercentral:CreateCollaborationChannelMembers (Write)
  • partnercentral:CreateCollaborationChannelRequest (Write)
  • partnercentral:CreateEngagement (Write)
  • partnercentral:CreateEngagementContext (Write)
  • partnercentral:CreateEngagementInvitation (Write)
  • partnercentral:CreateOpportunity (Write)
  • partnercentral:CreateResourceSnapshot (Write)
  • partnercentral:CreateResourceSnapshotJob (Write)
  • partnercentral:DeleteResourceSnapshotJob (Write)
  • partnercentral:DisassociateOpportunity (Write)
  • partnercentral:GetAwsOpportunitySummary (Read)
  • partnercentral:GetCollaborationChannel (Read)
  • partnercentral:GetEngagement (Read)
  • partnercentral:GetEngagementInvitation (Read)
  • partnercentral:GetOpportunity (Read)
  • partnercentral:GetPartner (Read)
  • partnercentral:GetPartnerCentralContentDocument (Read)
  • partnercentral:GetPartnerCentralContentMetadata (Read)
  • partnercentral:GetPartnerDashboard (Read)
  • partnercentral:GetProspectingFromEngagementTask (Read)
  • partnercentral:GetResourceSnapshot (Read)
  • partnercentral:GetResourceSnapshotJob (Read)
  • partnercentral:ListCollaborationChannels (List)
  • partnercentral:ListEngagementByAcceptingInvitationTasks (List)
  • partnercentral:ListEngagementFromOpportunityTasks (List)
  • partnercentral:ListEngagementInvitations (List)
  • partnercentral:ListEngagementMembers (Read)
  • partnercentral:ListEngagementResourceAssociations (Read)
  • partnercentral:ListEngagements (List)
  • partnercentral:ListOpportunities (List)
  • partnercentral:ListOpportunityFromEngagementTasks (List)
  • partnercentral:ListPartnerCentralContent (List)
  • partnercentral:ListPartners (List)
  • partnercentral:ListProspectingFromEngagementTasks (List)
  • partnercentral:ListResourceSnapshotJobs (List)
  • partnercentral:ListResourceSnapshots (List)
  • partnercentral:ListSolutions (List)
  • partnercentral:ListTagsForResource (Read)
  • partnercentral:RejectEngagementInvitation (Write)
  • partnercentral:SearchOpportunities (List)
  • partnercentral:SearchPartnerCentralContent (List)
  • partnercentral:StartEngagementByAcceptingInvitationTask (Write)
  • partnercentral:StartEngagementFromOpportunityTask (Write)
  • partnercentral:StartOpportunityFromEngagementTask (Write)
  • partnercentral:StartProspectingFromEngagementTask (Write)
  • partnercentral:StartResourceSnapshotJob (Write)
  • partnercentral:StopResourceSnapshotJob (Write)
  • partnercentral:SubmitOpportunity (Write)
  • partnercentral:TagResource (Tagging)
  • partnercentral:UntagResource (Tagging)
  • partnercentral:UpdateEngagementContext (Write)
  • partnercentral:UpdateOpportunity (Write)
  • partnercentral:UseSession (Write)
Partner central account management: 1 actions
  • partnercentral-account-management:AccessLegacyPartnerCentral (Write)
Q: 5 actions
  • q:GetConversation (Read)
  • q:ListConversations (Read)
  • q:PassRequest (Write)
  • q:SendMessage (Write)
  • q:StartConversation (Write)

Data-plane actions (0)

By access level: none.

This policy grants no actions in this plane.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: mixed.

Can be attached: Yes, to users, groups and roles.

Why this tier

  • Grants 30 write, tagging or permissions-management actions, short of full control of any service.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Same service

Same domain

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "OpportunityManagement",
      "Effect": "Allow",
      "Action": [
        "partnercentral:AcceptEngagementInvitation",
        "partnercentral:AssignOpportunity",
        "partnercentral:AssociateOpportunity",
        "partnercentral:CreateEngagement",
        "partnercentral:CreateEngagementContext",
        "partnercentral:CreateEngagementInvitation",
        "partnercentral:CreateOpportunity",
        "partnercentral:CreateResourceSnapshot",
        "partnercentral:CreateResourceSnapshotJob",
        "partnercentral:DeleteResourceSnapshotJob",
        "partnercentral:DisassociateOpportunity",
        "partnercentral:GetAwsOpportunitySummary",
        "partnercentral:GetEngagement",
        "partnercentral:GetEngagementInvitation",
        "partnercentral:GetOpportunity",
        "partnercentral:GetOpportunityBulkJobReportUrl",
        "partnercentral:GetProspectingFromEngagementTask",
        "partnercentral:GetResourceSnapshot",
        "partnercentral:GetResourceSnapshotJob",
        "partnercentral:ListEngagementByAcceptingInvitationTasks",
        "partnercentral:ListEngagementFromOpportunityTasks",
        "partnercentral:ListEngagementInvitations",
        "partnercentral:ListEngagementMembers",
        "partnercentral:ListEngagementResourceAssociations",
        "partnercentral:ListEngagements",
        "partnercentral:ListOpportunities",
        "partnercentral:ListOpportunityBulkJobs",
        "partnercentral:ListOpportunityBulkJobResults",
        "partnercentral:ListOpportunityFromEngagementTasks",
        "partnercentral:ListProspectingFromEngagementTasks",
        "partnercentral:ListResourceSnapshotJobs",
        "partnercentral:ListResourceSnapshots",
        "partnercentral:ListSolutions",
        "partnercentral:RejectEngagementInvitation",
        "partnercentral:SearchOpportunities",
        "partnercentral:StartEngagementByAcceptingInvitationTask",
        "partnercentral:StartEngagementFromOpportunityTask",
        "partnercentral:StartOpportunityBulkJob",
        "partnercentral:StartOpportunityFromEngagementTask",
        "partnercentral:StartProspectingFromEngagementTask",
        "partnercentral:StartResourceSnapshotJob",
        "partnercentral:StopResourceSnapshotJob",
        "partnercentral:SubmitOpportunity",
        "partnercentral:UpdateEngagementContext",
        "partnercentral:UpdateOpportunity"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        }
      }
    },
    {
      "Sid": "ListingAWSMarketplaceEntities",
      "Effect": "Allow",
      "Action": [
        "aws-marketplace:ListEntities"
      ],
      "Resource": "*"
    },
    {
      "Sid": "AWSMarketplaceEntityAccess",
      "Effect": "Allow",
      "Action": [
        "aws-marketplace:DescribeEntity"
      ],
      "Resource": [
        "arn:aws:aws-marketplace:*:*:AWSMarketplace*/Solution/*",
        "arn:aws:aws-marketplace:*:*:AWSMarketplace*/OfferSet/*",
        "arn:aws:aws-marketplace:*:*:AWSMarketplace*/Offer/*"
      ]
    },
    {
      "Sid": "LegacyPartnerCentralAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral-account-management:AccessLegacyPartnerCentral"
      ],
      "Resource": "*",
      "Condition": {
        "ForAnyValue:StringEquals": {
          "partnercentral-account-management:LegacyPartnerCentralRole": "AceManager"
        }
      }
    },
    {
      "Sid": "PartnerDashboardAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:GetPartnerDashboard"
      ],
      "Resource": [
        "arn:aws:partnercentral::*:catalog/AWS/ReportingData/Opportunity_V1/Dashboard/*",
        "arn:aws:partnercentral::*:catalog/AWS/ReportingData/Engagement_V1/Dashboard/*"
      ]
    },
    {
      "Sid": "CollaborationChannelAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:CreateCollaborationChannelRequest",
        "partnercentral:ListCollaborationChannels",
        "partnercentral:GetCollaborationChannel",
        "partnercentral:CreateCollaborationChannelMembers"
      ],
      "Resource": "*"
    },
    {
      "Sid": "PartnerResourceAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:ListPartners",
        "partnercentral:GetPartner"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        }
      }
    },
    {
      "Sid": "PartnerCentralContentAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:GetPartnerCentralContentDocument",
        "partnercentral:GetPartnerCentralContentMetadata",
        "partnercentral:ListPartnerCentralContent",
        "partnercentral:SearchPartnerCentralContent"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        }
      }
    },
    {
      "Sid": "TaggingAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:TagResource",
        "partnercentral:UntagResource",
        "partnercentral:ListTagsForResource"
      ],
      "Resource": [
        "arn:aws:partnercentral:*:*:catalog/*/opportunity/*",
        "arn:aws:partnercentral:*:*:catalog/*/resource-snapshot-job/*"
      ],
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        }
      }
    },
    {
      "Sid": "AmazonQPartnerAssistantAccess",
      "Effect": "Allow",
      "Action": [
        "q:StartConversation",
        "q:SendMessage",
        "q:GetConversation",
        "q:ListConversations",
        "q:PassRequest"
      ],
      "Resource": "*"
    },
    {
      "Sid": "PartnerCentralAgentsSessionAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:UseSession"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        },
        "Bool": {
          "aws:IsMcpServiceAction": "true"
        }
      }
    }
  ]
}

Version history

Current version v13, edited by AWS on 2026-11-10. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

AWS CLI

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralOpportunityManagement
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralOpportunityManagement
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralOpportunityManagement

CloudFormation

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AWSPartnerCentralOpportunityManagement

Terraform

resource "aws_iam_role_policy_attachment" "awspartnercentralopportunitymanagement" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/AWSPartnerCentralOpportunityManagement"
}

CDK (TypeScript)

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("AWSPartnerCentralOpportunityManagement"),
);

Sources

Pending editorial review. No editorial sources are listed yet.