Directory Service Data
Prefix ds-data, 17 actions · Domain Security, Identity & Compliance
2 AWS managed policies. 1 have reviewed guidance; the rest have authoritative permission data pending editorial review.
Operator and limited (2)
Also grants Directory Service Data actions (5)
addgroupmember creategroup createuser deletegroup deleteuser describegroup describeuser disableuser listgroupmembers listgroups listgroupsformember listusers removegroupmember searchgroups searchusers updategroup updateuser
Actions (17)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| ds-data:AddGroupMember | Write | 4 | 2 |
| ds-data:CreateGroup | Write | 4 | 2 |
| ds-data:CreateUser | Write | 4 | 2 |
| ds-data:DeleteGroup | Write | 4 | 2 |
| ds-data:DeleteUser | Write | 4 | 2 |
| ds-data:DescribeGroup | Read | 4 | 3 |
| ds-data:DescribeUser | Read | 4 | 3 |
| ds-data:DisableUser | Write | 4 | 2 |
| ds-data:ListGroupMembers | List | 4 | 3 |
| ds-data:ListGroups | List | 4 | 3 |
| ds-data:ListGroupsForMember | List | 4 | 3 |
| ds-data:ListUsers | List | 4 | 3 |
| ds-data:RemoveGroupMember | Write | 4 | 2 |
| ds-data:SearchGroups | Read | 4 | 3 |
| ds-data:SearchUsers | Read | 4 | 3 |
| ds-data:UpdateGroup | Write | 4 | 2 |
| ds-data:UpdateUser | Write | 4 | 2 |