Skip to main content
IAM Policy Map

WorkMail

Prefix workmail, 126 actions · Domain End User Computing

2 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.

User access (2)

Also grants WorkMail actions (10)

Actions (126)

WorkMail actions that managed policies grant
ActionAccess levelPolicies granting without limitsPolicies granting with resource or condition limits
workmail:AllowVendedLogDeliveryForResourceWrite51
workmail:AssociateDelegateToResourceWrite51
workmail:AssociateMemberToGroupWrite51
workmail:AssumeImpersonationRoleWrite51
workmail:CancelMailboxExportJobWrite51
workmail:CreateAliasWrite51
workmail:CreateAvailabilityConfigurationWrite51
workmail:CreateGroupWrite51
workmail:CreateIdentityCenterApplicationWrite51
workmail:CreateImpersonationRoleWrite51
workmail:CreateInboundMailFlowRuleWrite51
workmail:CreateMailDomainWrite51
workmail:CreateMobileDeviceAccessRuleWrite51
workmail:CreateOrganizationWrite51
workmail:CreateOutboundMailFlowRuleWrite51
workmail:CreateResourceWrite51
workmail:CreateSmtpGatewayWrite51
workmail:CreateUserWrite51
workmail:DeleteAccessControlRuleWrite51
workmail:DeleteAliasWrite51
workmail:DeleteAvailabilityConfigurationWrite51
workmail:DeleteEmailMonitoringConfigurationWrite51
workmail:DeleteGroupWrite51
workmail:DeleteIdentityCenterApplicationWrite51
workmail:DeleteIdentityProviderConfigurationWrite51
workmail:DeleteImpersonationRoleWrite51
workmail:DeleteInboundMailFlowRuleWrite51
workmail:DeleteMailDomainWrite51
workmail:DeleteMailboxPermissionsWrite51
workmail:DeleteMobileDeviceWrite51
workmail:DeleteMobileDeviceAccessOverrideWrite51
workmail:DeleteMobileDeviceAccessRuleWrite51
workmail:DeleteOrganizationWrite51
workmail:DeleteOutboundMailFlowRuleWrite51
workmail:DeletePersonalAccessTokenWrite51
workmail:DeleteResourceWrite51
workmail:DeleteRetentionPolicyWrite51
workmail:DeleteSmtpGatewayWrite51
workmail:DeleteUserWrite51
workmail:DeliverToMailboxWrite51
workmail:DeregisterFromWorkMailWrite51
workmail:DeregisterMailDomainWrite51
workmail:DescribeEmailMonitoringConfigurationRead91
workmail:DescribeEntityRead91
workmail:DescribeGroupList101
workmail:DescribeIdentityProviderConfigurationRead91
workmail:DescribeInboundDmarcSettingsRead91
workmail:DescribeInboundMailFlowRuleRead91
workmail:DescribeMailDomainsList91
workmail:DescribeMailboxExportJobRead91
workmail:DescribeOrganizationList101
workmail:DescribeOutboundMailFlowRuleRead91
workmail:DescribeResourceList101
workmail:DescribeSmtpGatewayRead91
workmail:DescribeUserList101
workmail:DisassociateDelegateFromResourceWrite51
workmail:DisassociateMemberFromGroupWrite51
workmail:EnableMailDomainWrite51
workmail:GetAccessControlEffectRead81
workmail:GetDefaultRetentionPolicyRead81
workmail:GetImpersonationRoleRead81
workmail:GetImpersonationRoleEffectRead81
workmail:GetJournalingRulesRead81
workmail:GetMailDomainRead81
workmail:GetMailDomainDetailsRead81
workmail:GetMailboxDetailsRead81
workmail:GetMobileDeviceAccessEffectRead81
workmail:GetMobileDeviceAccessOverrideRead81
workmail:GetMobileDeviceDetailsRead81
workmail:GetMobileDevicesForUserRead81
workmail:GetMobilePolicyDetailsRead81
workmail:GetPersonalAccessTokenMetadataRead81
workmail:ListAccessControlRulesRead71
workmail:ListAliasesList81
workmail:ListAvailabilityConfigurationsRead71
workmail:ListGroupMembersList81
workmail:ListGroupsList81
workmail:ListGroupsForEntityList71
workmail:ListImpersonationRolesList71
workmail:ListInboundMailFlowRulesList71
workmail:ListMailDomainsList71
workmail:ListMailboxExportJobsList71
workmail:ListMailboxPermissionsList81
workmail:ListMobileDeviceAccessOverridesRead71
workmail:ListMobileDeviceAccessRulesRead71
workmail:ListOrganizationsList81
workmail:ListOutboundMailFlowRulesList71
workmail:ListPersonalAccessTokensList71
workmail:ListResourceDelegatesList81
workmail:ListResourcesList81
workmail:ListSmtpGatewaysList71
workmail:ListTagsForResourceList71
workmail:ListUsersList81
workmail:PutAccessControlRuleWrite51
workmail:PutEmailMonitoringConfigurationWrite51
workmail:PutIdentityProviderConfigurationWrite51
workmail:PutInboundDmarcSettingsWrite51
workmail:PutMailboxPermissionsWrite51
workmail:PutMobileDeviceAccessOverrideWrite51
workmail:PutRetentionPolicyWrite51
workmail:RegisterMailDomainWrite51
workmail:RegisterToWorkMailWrite51
workmail:ResetPasswordWrite51
workmail:SearchMembersRead71
workmail:SetDefaultMailDomainWrite51
workmail:SetJournalingRulesWrite51
workmail:SetMobilePolicyDetailsWrite51
workmail:StartMailboxExportJobWrite51
workmail:TagResourceTagging61
workmail:TestAvailabilityConfigurationRead51
workmail:TestInboundMailFlowRulesWrite51
workmail:TestOutboundMailFlowRulesWrite51
workmail:UntagResourceTagging61
workmail:UpdateAvailabilityConfigurationWrite51
workmail:UpdateDefaultMailDomainWrite51
workmail:UpdateGroupWrite51
workmail:UpdateImpersonationRoleWrite51
workmail:UpdateInboundMailFlowRuleWrite51
workmail:UpdateMailboxQuotaWrite51
workmail:UpdateMobileDeviceAccessRuleWrite51
workmail:UpdateOutboundMailFlowRuleWrite51
workmail:UpdatePrimaryEmailAddressWrite51
workmail:UpdateResourceWrite51
workmail:UpdateSmtpGatewayWrite51
workmail:UpdateUserWrite51
workmail:WipeMobileDeviceWrite51