# AccessGrantPrincipal
<a name="API_AccessGrantPrincipal"></a>

The principal receiving the grant. Specify principalId, principalAttributes, or both.

## Contents
<a name="API_AccessGrantPrincipal_Contents"></a>

 ** principalType **   <a name="cloudwatchomni-Type-AccessGrantPrincipal-principalType"></a>
The type of principal receiving the grant.  
Type: String  
Valid Values: `IDC_USER | IDC_GROUP | IAM_USER | IAM_ROLE | IAM_ROOT | ACCESS_PROFILE | ALERT | AGENT`   
Required: Yes

 ** principalAttributes **   <a name="cloudwatchomni-Type-AccessGrantPrincipal-principalAttributes"></a>
Attribute conditions for attribute-based access. When provided, the grant targets any principal matching all specified conditions. Supported only for IDC\_USER principals.  
Type: Array of [AccessGrantPrincipalAttribute](API_AccessGrantPrincipalAttribute.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 10 items.  
Required: No

 ** principalId **   <a name="cloudwatchomni-Type-AccessGrantPrincipal-principalId"></a>
The ID of the principal receiving the grant.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 2048.  
Pattern: `[a-zA-Z0-9][a-zA-Z0-9:/_+=,.@-]*`   
Required: No

## See Also
<a name="API_AccessGrantPrincipal_SeeAlso"></a>

For more information about using this API in one of the language-specific AWS SDKs, see the following:
+  [AWS SDK for C\+\+](https://docs.aws.amazon.com/goto/SdkForCpp/cloudwatchomni-2025-01-01/AccessGrantPrincipal) 
+  [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/cloudwatchomni-2025-01-01/AccessGrantPrincipal) 
+  [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/cloudwatchomni-2025-01-01/AccessGrantPrincipal)