describe-custom-permissions¶

Description¶

Describes a custom permissions profile.

Synopsis¶

  describe-custom-permissions
--aws-account-id <value>
--custom-permissions-name <value>
[--cli-input-json | --cli-input-yaml]
[--generate-cli-skeleton <value>]
[--debug]
[--endpoint-url <value>]
[--no-verify-ssl]
[--no-paginate]
[--output <value>]
[--query <value>]
[--profile <value>]
[--region <value>]
[--version <value>]
[--color <value>]
[--no-sign-request]
[--ca-bundle <value>]
[--cli-read-timeout <value>]
[--cli-connect-timeout <value>]
[--cli-binary-format <value>]
[--no-cli-pager]
[--cli-auto-prompt]
[--no-cli-auto-prompt]
[--cli-error-format <value>]

Options¶

--aws-account-id (string) [required]

The ID of the Amazon Web Services account that contains the custom permissions profile that you want described.

Constraints:

min: 12

max: 12

pattern: ^[0-9]{12}$

--custom-permissions-name (string) [required]

The name of the custom permissions profile to describe.

Constraints:

min: 1

max: 64

pattern: ^[a-zA-Z0-9+=,.@_-]+$

--cli-input-json | --cli-input-yaml (string) Reads arguments from the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, those values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally. This may not be specified along with --cli-input-yaml.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. Similarly, if provided yaml-input it will print a sample input YAML that can be used with --cli-input-yaml. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command. The generated JSON skeleton is not stable between versions of the AWS CLI and there are no backwards compatibility guarantees in the JSON skeleton generated.

Global Options¶

--debug (boolean)

Turn on debug logging.

--endpoint-url (string)

Override command’s default URL with the given URL.

--no-verify-ssl (boolean)

By default, the AWS CLI uses SSL when communicating with AWS services. For each SSL connection, the AWS CLI will verify SSL certificates. This option overrides the default behavior of verifying SSL certificates.

--no-paginate (boolean)

Disable automatic pagination. If automatic pagination is disabled, the AWS CLI will only make one call, for the first page of results.

--output (string)

The formatting style for command output.

json
text
table
yaml
yaml-stream
off

--query (string)

A JMESPath query to use in filtering the response data.

--profile (string)

Use a specific profile from your credential file.

--region (string)

The region to use. Overrides config/env settings.

--version (string)

Display the version of this tool.

--color (string)

Turn on/off color output.

on
off
auto

--no-sign-request (boolean)

Do not sign requests. Credentials will not be loaded if this argument is provided.

--ca-bundle (string)

The CA certificate bundle to use when verifying SSL certificates. Overrides config/env settings.

--cli-read-timeout (int)

The maximum socket read time in seconds. If the value is set to 0, the socket read will be blocking and not timeout. The default value is 60 seconds.

--cli-connect-timeout (int)

The maximum socket connect time in seconds. If the value is set to 0, the socket connect will be blocking and not timeout. The default value is 60 seconds.

--cli-binary-format (string)

The formatting style to be used for binary blobs. The default format is base64. The base64 format expects binary blobs to be provided as a base64 encoded string. The raw-in-base64-out format preserves compatibility with AWS CLI V1 behavior and binary values must be passed literally. When providing contents from a file that map to a binary blob fileb:// will always be treated as binary and use the file contents directly regardless of the cli-binary-format setting. When using file:// the file contents will need to properly formatted for the configured cli-binary-format.

base64
raw-in-base64-out

--no-cli-pager (boolean)

Disable cli pager for output.

--cli-auto-prompt (boolean)

Automatically prompt for CLI input parameters.

--no-cli-auto-prompt (boolean)

Disable automatically prompt for CLI input parameters.

--cli-error-format (string)

The formatting style for error output. By default, errors are displayed in enhanced format.

legacy
json
yaml
text
table
enhanced

Output¶

Status -> (integer)

The HTTP status of the request.

CustomPermissions -> (structure)

The custom permissions profile.

Arn -> (string)

The Amazon Resource Name (ARN) of the custom permissions profile.

CustomPermissionsName -> (string)

The name of the custom permissions profile.

Constraints:

min: 1

max: 64

pattern: ^[a-zA-Z0-9+=,.@_-]+$

Capabilities -> (structure)

A set of actions in the custom permissions profile.

ExportToCsv -> (string)

The ability to export to CSV files from the UI.

Possible values:

DENY

ALLOW

ExportToExcel -> (string)

The ability to export to Excel files from the UI.

Possible values:

DENY

ALLOW

ExportToPdf -> (string)

The ability to export to PDF files from the UI.

Possible values:

DENY

ALLOW

PrintReports -> (string)

The ability to print reports.

Possible values:

DENY

ALLOW

CreateAndUpdateThemes -> (string)

The ability to export to Create and Update themes.

Possible values:

DENY

ALLOW

AddOrRunAnomalyDetectionForAnalyses -> (string)

The ability to add or run anomaly detection.

Possible values:

DENY

ALLOW

ShareAnalyses -> (string)

The ability to share analyses.

Possible values:

DENY

ALLOW

CreateAndUpdateDatasets -> (string)

The ability to create and update datasets.

Possible values:

DENY

ALLOW

ShareDatasets -> (string)

The ability to share datasets.

Possible values:

DENY

ALLOW

SubscribeDashboardEmailReports -> (string)

The ability to subscribe to email reports.

Possible values:

DENY

ALLOW

CreateAndUpdateDashboardEmailReports -> (string)

The ability to create and update email reports.

Possible values:

DENY

ALLOW

ShareDashboards -> (string)

The ability to share dashboards.

Possible values:

DENY

ALLOW

CreateAndUpdateThresholdAlerts -> (string)

The ability to create and update threshold alerts.

Possible values:

DENY

ALLOW

RenameSharedFolders -> (string)

The ability to rename shared folders.

Possible values:

DENY

ALLOW

CreateSharedFolders -> (string)

The ability to create shared folders.

Possible values:

DENY

ALLOW

CreateAndUpdateDataSources -> (string)

The ability to create and update data sources.

Possible values:

DENY

ALLOW

ShareDataSources -> (string)

The ability to share data sources.

Possible values:

DENY

ALLOW

ViewAccountSPICECapacity -> (string)

The ability to view account SPICE capacity.

Possible values:

DENY

ALLOW

CreateSPICEDataset -> (string)

The ability to create a SPICE dataset.

Possible values:

DENY

ALLOW

ExportToPdfInScheduledReports -> (string)

The ability to export to PDF files in scheduled email reports.

Possible values:

DENY

ALLOW

ExportToCsvInScheduledReports -> (string)

The ability to export to CSV files in scheduled email reports.

Possible values:

DENY

ALLOW

ExportToExcelInScheduledReports -> (string)

The ability to export to Excel files in scheduled email reports.

Possible values:

DENY

ALLOW

IncludeContentInScheduledReportsEmail -> (string)

The ability to include content in scheduled email reports.

Possible values:

DENY

ALLOW

Dashboard -> (string)

The ability to perform dashboard-related actions.

Possible values:

DENY

ALLOW

Analysis -> (string)

The ability to perform analysis-related actions.

Possible values:

DENY

ALLOW

Automate -> (string)

The ability to perform automate-related actions.

Possible values:

DENY

ALLOW

Flow -> (string)

The ability to perform flow-related actions.

Possible values:

DENY

ALLOW

Apps -> (string)

The ability to perform apps-related actions.

Possible values:

DENY

ALLOW

CreateAndUpdateApps -> (string)

The ability to create or update apps.

Possible values:

DENY

ALLOW

ShareApps -> (string)

The ability to share apps with other users.

Possible values:

DENY

ALLOW

InvokeAppsAIInference -> (string)

The ability to add and invoke AI inference in new and existing apps.

Possible values:

DENY

ALLOW

AccessAppsNativeDataStore -> (string)

The ability to access the native data store for new and existing apps.

Possible values:

DENY

ALLOW

PublishWithoutApproval -> (string)

The ability to enable approvals for flow share.

Possible values:

DENY

ALLOW

UseBedrockModels -> (string)

The ability to use Bedrock models for general knowledge step in flows.

Possible values:

DENY

ALLOW

PerformFlowUiTask -> (string)

The ability to use UI Agent step to perform tasks on public websites.

Possible values:

DENY

ALLOW

ApproveFlowShareRequests -> (string)

The ability to review and approve sharing requests of Flows.

Possible values:

DENY

ALLOW

UseAgentWebSearch -> (string)

The ability to use internet to enhance results in Chat Agents, Flows, and Quick Research. Web search queries will be processed securely in an Amazon Web Services region us-east-1 .

Possible values:

DENY

ALLOW

KnowledgeBase -> (string)

The ability to use knowledge bases to specify content from external applications.

Possible values:

DENY

ALLOW

CreateAndUpdateKnowledgeBases -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareKnowledgeBases -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

SharePointKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateSharePointKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareSharePointKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseSharePointKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

GoogleDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareGoogleDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseGoogleDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

WebCrawlerKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateWebCrawlerKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareWebCrawlerKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseWebCrawlerKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

S3KnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateS3KnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareS3KnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseS3KnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ConfluenceKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateConfluenceKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareConfluenceKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseConfluenceKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

OneDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateOneDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareOneDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseOneDriveKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

QBusinessKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateQBusinessKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareQBusinessKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseQBusinessKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

BedrockManagedKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateBedrockManagedKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareBedrockManagedKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseBedrockManagedKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

BoxKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateBoxKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareBoxKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseBoxKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

IDCKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

CreateAndUpdateIDCKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

ShareIDCKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

UseIDCKnowledgeBase -> (string)

The permission state of a capability in a custom permissions profile. Valid values:

DENY – Amazon Quick denies this capability for users assigned to the profile.

ALLOW – Amazon Quick grants this capability to users assigned to the profile. This value is only relevant when governance is enabled for the capability’s category. Without governance, the default effect is always ALLOW . In a governed category, this value overrides the category-level deny-by-default behavior for that capability only.

Possible values:

DENY

ALLOW

Action -> (string)

The ability to perform actions in external services through Action connectors. Actions allow users to interact with third-party systems.

Possible values:

DENY

ALLOW

GenericHTTPAction -> (string)

The ability to perform actions using REST API connection connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGenericHTTPAction -> (string)

The ability to create and update REST API connection actions.

Possible values:

DENY

ALLOW

ShareGenericHTTPAction -> (string)

The ability to share REST API connection actions.

Possible values:

DENY

ALLOW

UseGenericHTTPAction -> (string)

The ability to use REST API connection actions.

Possible values:

DENY

ALLOW

AsanaAction -> (string)

The ability to perform actions using Asana connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateAsanaAction -> (string)

The ability to create and update Asana actions.

Possible values:

DENY

ALLOW

ShareAsanaAction -> (string)

The ability to share Asana actions.

Possible values:

DENY

ALLOW

UseAsanaAction -> (string)

The ability to use Asana actions.

Possible values:

DENY

ALLOW

SlackAction -> (string)

The ability to perform actions using Slack connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSlackAction -> (string)

The ability to create and update Slack actions.

Possible values:

DENY

ALLOW

ShareSlackAction -> (string)

The ability to share Slack actions.

Possible values:

DENY

ALLOW

UseSlackAction -> (string)

The ability to use Slack actions.

Possible values:

DENY

ALLOW

ServiceNowAction -> (string)

The ability to perform actions using ServiceNow connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateServiceNowAction -> (string)

The ability to create and update ServiceNow actions.

Possible values:

DENY

ALLOW

ShareServiceNowAction -> (string)

The ability to share ServiceNow actions.

Possible values:

DENY

ALLOW

UseServiceNowAction -> (string)

The ability to use ServiceNow actions.

Possible values:

DENY

ALLOW

SalesforceAction -> (string)

The ability to perform actions using Salesforce connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSalesforceAction -> (string)

The ability to create and update Salesforce actions.

Possible values:

DENY

ALLOW

ShareSalesforceAction -> (string)

The ability to share Salesforce actions.

Possible values:

DENY

ALLOW

UseSalesforceAction -> (string)

The ability to use Salesforce actions.

Possible values:

DENY

ALLOW

MSExchangeAction -> (string)

The ability to perform actions using Microsoft Outlook connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateMSExchangeAction -> (string)

The ability to create and update Microsoft Outlook actions.

Possible values:

DENY

ALLOW

ShareMSExchangeAction -> (string)

The ability to share Microsoft Outlook actions.

Possible values:

DENY

ALLOW

UseMSExchangeAction -> (string)

The ability to use Microsoft Outlook actions.

Possible values:

DENY

ALLOW

PagerDutyAction -> (string)

The ability to perform actions using PagerDuty Advance connectors.

Possible values:

DENY

ALLOW

CreateAndUpdatePagerDutyAction -> (string)

The ability to create and update PagerDuty Advance actions.

Possible values:

DENY

ALLOW

SharePagerDutyAction -> (string)

The ability to share PagerDuty Advance actions.

Possible values:

DENY

ALLOW

UsePagerDutyAction -> (string)

The ability to use PagerDuty Advance actions.

Possible values:

DENY

ALLOW

JiraAction -> (string)

The ability to perform actions using Jira connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateJiraAction -> (string)

The ability to create and update Jira actions.

Possible values:

DENY

ALLOW

ShareJiraAction -> (string)

The ability to share Jira actions.

Possible values:

DENY

ALLOW

UseJiraAction -> (string)

The ability to use Jira actions.

Possible values:

DENY

ALLOW

ConfluenceAction -> (string)

The ability to perform actions using Atlassian Confluence Cloud connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateConfluenceAction -> (string)

The ability to create and update Atlassian Confluence Cloud actions.

Possible values:

DENY

ALLOW

ShareConfluenceAction -> (string)

The ability to share Atlassian Confluence Cloud actions.

Possible values:

DENY

ALLOW

UseConfluenceAction -> (string)

The ability to use Atlassian Confluence Cloud actions.

Possible values:

DENY

ALLOW

OneDriveAction -> (string)

The ability to perform actions using Microsoft OneDrive connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateOneDriveAction -> (string)

The ability to create and update Microsoft OneDrive actions.

Possible values:

DENY

ALLOW

ShareOneDriveAction -> (string)

The ability to share Microsoft OneDrive actions.

Possible values:

DENY

ALLOW

UseOneDriveAction -> (string)

The ability to use Microsoft OneDrive actions.

Possible values:

DENY

ALLOW

SharePointAction -> (string)

The ability to perform actions using Microsoft SharePoint Online connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSharePointAction -> (string)

The ability to create and update Microsoft SharePoint Online actions.

Possible values:

DENY

ALLOW

ShareSharePointAction -> (string)

The ability to share Microsoft SharePoint Online actions.

Possible values:

DENY

ALLOW

UseSharePointAction -> (string)

The ability to use Microsoft SharePoint Online actions.

Possible values:

DENY

ALLOW

MSTeamsAction -> (string)

The ability to perform actions using Microsoft Teams connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateMSTeamsAction -> (string)

The ability to create and update Microsoft Teams actions.

Possible values:

DENY

ALLOW

ShareMSTeamsAction -> (string)

The ability to share Microsoft Teams actions.

Possible values:

DENY

ALLOW

UseMSTeamsAction -> (string)

The ability to use Microsoft Teams actions.

Possible values:

DENY

ALLOW

GoogleCalendarAction -> (string)

The ability to perform actions using Google Calendar connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleCalendarAction -> (string)

The ability to create and update Google Calendar actions.

Possible values:

DENY

ALLOW

ShareGoogleCalendarAction -> (string)

The ability to share Google Calendar actions.

Possible values:

DENY

ALLOW

UseGoogleCalendarAction -> (string)

The ability to use Google Calendar actions.

Possible values:

DENY

ALLOW

ZendeskAction -> (string)

The ability to perform actions using Zendesk connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateZendeskAction -> (string)

The ability to create and update Zendesk actions.

Possible values:

DENY

ALLOW

ShareZendeskAction -> (string)

The ability to share Zendesk actions.

Possible values:

DENY

ALLOW

UseZendeskAction -> (string)

The ability to use Zendesk actions.

Possible values:

DENY

ALLOW

SmartsheetAction -> (string)

The ability to perform actions using Smartsheet connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSmartsheetAction -> (string)

The ability to create and update Smartsheet actions.

Possible values:

DENY

ALLOW

ShareSmartsheetAction -> (string)

The ability to share Smartsheet actions.

Possible values:

DENY

ALLOW

UseSmartsheetAction -> (string)

The ability to use Smartsheet actions.

Possible values:

DENY

ALLOW

SAPBusinessPartnerAction -> (string)

The ability to perform actions using SAP Business Partner connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSAPBusinessPartnerAction -> (string)

The ability to create and update SAP Business Partner actions.

Possible values:

DENY

ALLOW

ShareSAPBusinessPartnerAction -> (string)

The ability to share SAP Business Partner actions.

Possible values:

DENY

ALLOW

UseSAPBusinessPartnerAction -> (string)

The ability to use SAP Business Partner actions.

Possible values:

DENY

ALLOW

SAPProductMasterDataAction -> (string)

The ability to perform actions using SAP Product Master connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSAPProductMasterDataAction -> (string)

The ability to create and update SAP Product Master actions.

Possible values:

DENY

ALLOW

ShareSAPProductMasterDataAction -> (string)

The ability to share SAP Product Master actions.

Possible values:

DENY

ALLOW

UseSAPProductMasterDataAction -> (string)

The ability to use SAP Product Master actions.

Possible values:

DENY

ALLOW

SAPPhysicalInventoryAction -> (string)

The ability to perform actions using SAP Physical Inventory connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSAPPhysicalInventoryAction -> (string)

The ability to create and update SAP Physical Inventory actions.

Possible values:

DENY

ALLOW

ShareSAPPhysicalInventoryAction -> (string)

The ability to share SAP Physical Inventory actions.

Possible values:

DENY

ALLOW

UseSAPPhysicalInventoryAction -> (string)

The ability to use SAP Physical Inventory actions.

Possible values:

DENY

ALLOW

SAPBillOfMaterialAction -> (string)

The ability to perform actions using SAP Bill of Materials connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSAPBillOfMaterialAction -> (string)

The ability to create and update SAP Bill of Materials actions.

Possible values:

DENY

ALLOW

ShareSAPBillOfMaterialAction -> (string)

The ability to share SAP Bill of Materials actions.

Possible values:

DENY

ALLOW

UseSAPBillOfMaterialAction -> (string)

The ability to use SAP Bill of Materials actions.

Possible values:

DENY

ALLOW

SAPMaterialStockAction -> (string)

The ability to perform actions using SAP Material Stock connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSAPMaterialStockAction -> (string)

The ability to create and update SAP Material Stock actions.

Possible values:

DENY

ALLOW

ShareSAPMaterialStockAction -> (string)

The ability to share SAP Material Stock actions.

Possible values:

DENY

ALLOW

UseSAPMaterialStockAction -> (string)

The ability to use SAP Material Stock actions.

Possible values:

DENY

ALLOW

FactSetAction -> (string)

The ability to perform actions using FactSet connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateFactSetAction -> (string)

The ability to create and update FactSet actions.

Possible values:

DENY

ALLOW

ShareFactSetAction -> (string)

The ability to share FactSet actions.

Possible values:

DENY

ALLOW

UseFactSetAction -> (string)

The ability to use FactSet actions.

Possible values:

DENY

ALLOW

AmazonSThreeAction -> (string)

The ability to perform actions using Amazon S3 connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateAmazonSThreeAction -> (string)

The ability to create and update Amazon S3 actions.

Possible values:

DENY

ALLOW

ShareAmazonSThreeAction -> (string)

The ability to share Amazon S3 actions.

Possible values:

DENY

ALLOW

UseAmazonSThreeAction -> (string)

The ability to use Amazon S3 actions.

Possible values:

DENY

ALLOW

TextractAction -> (string)

The ability to perform actions using Textract connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateTextractAction -> (string)

The ability to create and update Textract actions.

Possible values:

DENY

ALLOW

ShareTextractAction -> (string)

The ability to share Textract actions.

Possible values:

DENY

ALLOW

UseTextractAction -> (string)

The ability to use Textract actions.

Possible values:

DENY

ALLOW

ComprehendAction -> (string)

The ability to perform actions using Comprehend connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateComprehendAction -> (string)

The ability to create and update Comprehend actions.

Possible values:

DENY

ALLOW

ShareComprehendAction -> (string)

The ability to share Comprehend actions.

Possible values:

DENY

ALLOW

UseComprehendAction -> (string)

The ability to use Comprehend actions.

Possible values:

DENY

ALLOW

ComprehendMedicalAction -> (string)

The ability to perform actions using Comprehend Medical connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateComprehendMedicalAction -> (string)

The ability to create and update Comprehend Medical actions.

Possible values:

DENY

ALLOW

ShareComprehendMedicalAction -> (string)

The ability to share Comprehend Medical actions.

Possible values:

DENY

ALLOW

UseComprehendMedicalAction -> (string)

The ability to use Comprehend Medical actions.

Possible values:

DENY

ALLOW

AmazonBedrockARSAction -> (string)

The ability to perform actions using Bedrock Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateAmazonBedrockARSAction -> (string)

The ability to create and update Bedrock Agent actions.

Possible values:

DENY

ALLOW

ShareAmazonBedrockARSAction -> (string)

The ability to share Bedrock Agent actions.

Possible values:

DENY

ALLOW

UseAmazonBedrockARSAction -> (string)

The ability to use Bedrock Agent actions.

Possible values:

DENY

ALLOW

AmazonBedrockFSAction -> (string)

The ability to perform actions using Bedrock Runtime connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateAmazonBedrockFSAction -> (string)

The ability to create and update Bedrock Runtime actions.

Possible values:

DENY

ALLOW

ShareAmazonBedrockFSAction -> (string)

The ability to share Bedrock Runtime actions.

Possible values:

DENY

ALLOW

UseAmazonBedrockFSAction -> (string)

The ability to use Bedrock Runtime actions.

Possible values:

DENY

ALLOW

AmazonBedrockKRSAction -> (string)

The ability to perform actions using Bedrock Data Automation Runtime connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateAmazonBedrockKRSAction -> (string)

The ability to create and update Bedrock Data Automation Runtime actions.

Possible values:

DENY

ALLOW

ShareAmazonBedrockKRSAction -> (string)

The ability to share Bedrock Data Automation Runtime actions.

Possible values:

DENY

ALLOW

UseAmazonBedrockKRSAction -> (string)

The ability to use Bedrock Data Automation Runtime actions.

Possible values:

DENY

ALLOW

MCPAction -> (string)

The ability to perform actions using Model Context Protocol connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateMCPAction -> (string)

The ability to create and update Model Context Protocol actions.

Possible values:

DENY

ALLOW

ShareMCPAction -> (string)

The ability to share Model Context Protocol actions.

Possible values:

DENY

ALLOW

UseMCPAction -> (string)

The ability to use Model Context Protocol actions.

Possible values:

DENY

ALLOW

OpenAPIAction -> (string)

The ability to perform actions using OpenAPI Specification connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateOpenAPIAction -> (string)

The ability to create and update OpenAPI Specification actions.

Possible values:

DENY

ALLOW

ShareOpenAPIAction -> (string)

The ability to share OpenAPI Specification actions.

Possible values:

DENY

ALLOW

UseOpenAPIAction -> (string)

The ability to use OpenAPI Specification actions.

Possible values:

DENY

ALLOW

SandPGMIAction -> (string)

The ability to perform actions using S&P Global Market Intelligence connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSandPGMIAction -> (string)

The ability to create and update S&P Global Market Intelligence actions.

Possible values:

DENY

ALLOW

ShareSandPGMIAction -> (string)

The ability to share S&P Global Market Intelligence actions.

Possible values:

DENY

ALLOW

UseSandPGMIAction -> (string)

The ability to use S&P Global Market Intelligence actions.

Possible values:

DENY

ALLOW

SandPGlobalEnergyAction -> (string)

The ability to perform actions using S&P Global Energy connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSandPGlobalEnergyAction -> (string)

The ability to create and update S&P Global Energy actions.

Possible values:

DENY

ALLOW

ShareSandPGlobalEnergyAction -> (string)

The ability to share S&P Global Energy actions.

Possible values:

DENY

ALLOW

UseSandPGlobalEnergyAction -> (string)

The ability to use S&P Global Energy actions.

Possible values:

DENY

ALLOW

BambooHRAction -> (string)

The ability to perform actions using BambooHR connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateBambooHRAction -> (string)

The ability to create and update BambooHR actions.

Possible values:

DENY

ALLOW

ShareBambooHRAction -> (string)

The ability to share BambooHR actions.

Possible values:

DENY

ALLOW

UseBambooHRAction -> (string)

The ability to use BambooHR actions.

Possible values:

DENY

ALLOW

BoxAgentAction -> (string)

The ability to perform actions using Box Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateBoxAgentAction -> (string)

The ability to create and update Box Agent actions.

Possible values:

DENY

ALLOW

ShareBoxAgentAction -> (string)

The ability to share Box Agent actions.

Possible values:

DENY

ALLOW

UseBoxAgentAction -> (string)

The ability to use Box Agent actions.

Possible values:

DENY

ALLOW

CanvaAgentAction -> (string)

The ability to perform actions using Canva Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateCanvaAgentAction -> (string)

The ability to create and update Canva Agent actions.

Possible values:

DENY

ALLOW

ShareCanvaAgentAction -> (string)

The ability to share Canva Agent actions.

Possible values:

DENY

ALLOW

UseCanvaAgentAction -> (string)

The ability to use Canva Agent actions.

Possible values:

DENY

ALLOW

GithubAction -> (string)

The ability to perform actions using GitHub connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGithubAction -> (string)

The ability to create and update GitHub actions.

Possible values:

DENY

ALLOW

ShareGithubAction -> (string)

The ability to share GitHub actions.

Possible values:

DENY

ALLOW

UseGithubAction -> (string)

The ability to use GitHub actions.

Possible values:

DENY

ALLOW

NotionAction -> (string)

The ability to perform actions using Notion connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateNotionAction -> (string)

The ability to create and update Notion actions.

Possible values:

DENY

ALLOW

ShareNotionAction -> (string)

The ability to share Notion actions.

Possible values:

DENY

ALLOW

UseNotionAction -> (string)

The ability to use Notion actions.

Possible values:

DENY

ALLOW

LinearAction -> (string)

The ability to perform actions using Linear connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateLinearAction -> (string)

The ability to create and update Linear actions.

Possible values:

DENY

ALLOW

ShareLinearAction -> (string)

The ability to share Linear actions.

Possible values:

DENY

ALLOW

UseLinearAction -> (string)

The ability to use Linear actions.

Possible values:

DENY

ALLOW

HuggingFaceAction -> (string)

The ability to perform actions using HuggingFace connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateHuggingFaceAction -> (string)

The ability to create and update HuggingFace actions.

Possible values:

DENY

ALLOW

ShareHuggingFaceAction -> (string)

The ability to share HuggingFace actions.

Possible values:

DENY

ALLOW

UseHuggingFaceAction -> (string)

The ability to use HuggingFace actions.

Possible values:

DENY

ALLOW

MondayAction -> (string)

The ability to perform actions using Monday connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateMondayAction -> (string)

The ability to create and update Monday actions.

Possible values:

DENY

ALLOW

ShareMondayAction -> (string)

The ability to share Monday actions.

Possible values:

DENY

ALLOW

UseMondayAction -> (string)

The ability to use Monday actions.

Possible values:

DENY

ALLOW

HubspotAction -> (string)

The ability to perform actions using Hubspot connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateHubspotAction -> (string)

The ability to create and update Hubspot actions.

Possible values:

DENY

ALLOW

ShareHubspotAction -> (string)

The ability to share Hubspot actions.

Possible values:

DENY

ALLOW

UseHubspotAction -> (string)

The ability to use Hubspot actions.

Possible values:

DENY

ALLOW

IntercomAction -> (string)

The ability to perform actions using Intercom connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateIntercomAction -> (string)

The ability to create and update Intercom actions.

Possible values:

DENY

ALLOW

ShareIntercomAction -> (string)

The ability to share Intercom actions.

Possible values:

DENY

ALLOW

UseIntercomAction -> (string)

The ability to use Intercom actions.

Possible values:

DENY

ALLOW

NewRelicAction -> (string)

The ability to perform actions using New Relic connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateNewRelicAction -> (string)

The ability to create and update New Relic actions.

Possible values:

DENY

ALLOW

ShareNewRelicAction -> (string)

The ability to share New Relic actions.

Possible values:

DENY

ALLOW

UseNewRelicAction -> (string)

The ability to use New Relic actions.

Possible values:

DENY

ALLOW

PagerDutyAgentAction -> (string)

The ability to perform actions using PagerDuty Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdatePagerDutyAgentAction -> (string)

The ability to create and update PagerDuty Agent actions.

Possible values:

DENY

ALLOW

SharePagerDutyAgentAction -> (string)

The ability to share PagerDuty Agent actions.

Possible values:

DENY

ALLOW

UsePagerDutyAgentAction -> (string)

The ability to use PagerDuty Agent actions.

Possible values:

DENY

ALLOW

VisierAgentAction -> (string)

The ability to perform actions using Visier Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateVisierAgentAction -> (string)

The ability to create and update Visier Agent actions.

Possible values:

DENY

ALLOW

ShareVisierAgentAction -> (string)

The ability to share Visier Agent actions.

Possible values:

DENY

ALLOW

UseVisierAgentAction -> (string)

The ability to use Visier Agent actions.

Possible values:

DENY

ALLOW

ZoomAction -> (string)

The ability to perform actions using Zoom connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateZoomAction -> (string)

The ability to create and update Zoom actions.

Possible values:

DENY

ALLOW

ShareZoomAction -> (string)

The ability to share Zoom actions.

Possible values:

DENY

ALLOW

UseZoomAction -> (string)

The ability to use Zoom actions.

Possible values:

DENY

ALLOW

SnowFlakeAction -> (string)

The ability to perform actions using Snowflake Cortex Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateSnowFlakeAction -> (string)

The ability to create and update Snowflake Cortex Agent actions.

Possible values:

DENY

ALLOW

ShareSnowFlakeAction -> (string)

The ability to share Snowflake Cortex Agent actions.

Possible values:

DENY

ALLOW

UseSnowFlakeAction -> (string)

The ability to use Snowflake Cortex Agent actions.

Possible values:

DENY

ALLOW

ZapierAction -> (string)

The ability to perform actions using Zapier Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateZapierAction -> (string)

The ability to create and update Zapier Agent actions.

Possible values:

DENY

ALLOW

ShareZapierAction -> (string)

The ability to share Zapier Agent actions.

Possible values:

DENY

ALLOW

UseZapierAction -> (string)

The ability to use Zapier Agent actions.

Possible values:

DENY

ALLOW

AirtableAction -> (string)

The ability to perform actions using Airtable connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateAirtableAction -> (string)

The ability to create and update Airtable actions.

Possible values:

DENY

ALLOW

ShareAirtableAction -> (string)

The ability to share Airtable actions.

Possible values:

DENY

ALLOW

UseAirtableAction -> (string)

The ability to use Airtable actions.

Possible values:

DENY

ALLOW

DropboxAction -> (string)

The ability to perform actions using Dropbox connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateDropboxAction -> (string)

The ability to create and update Dropbox actions.

Possible values:

DENY

ALLOW

ShareDropboxAction -> (string)

The ability to share Dropbox actions.

Possible values:

DENY

ALLOW

UseDropboxAction -> (string)

The ability to use Dropbox actions.

Possible values:

DENY

ALLOW

GmailAction -> (string)

The ability to perform actions using Gmail connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGmailAction -> (string)

The ability to create and update Gmail actions.

Possible values:

DENY

ALLOW

ShareGmailAction -> (string)

The ability to share Gmail actions.

Possible values:

DENY

ALLOW

UseGmailAction -> (string)

The ability to use Gmail actions.

Possible values:

DENY

ALLOW

GoogleAnalyticsAction -> (string)

The ability to perform actions using Google Analytics connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleAnalyticsAction -> (string)

The ability to create and update Google Analytics actions.

Possible values:

DENY

ALLOW

ShareGoogleAnalyticsAction -> (string)

The ability to share Google Analytics actions.

Possible values:

DENY

ALLOW

UseGoogleAnalyticsAction -> (string)

The ability to use Google Analytics actions.

Possible values:

DENY

ALLOW

GoogleDocsAction -> (string)

The ability to perform actions using Google Docs connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleDocsAction -> (string)

The ability to create and update Google Docs actions.

Possible values:

DENY

ALLOW

ShareGoogleDocsAction -> (string)

The ability to share Google Docs actions.

Possible values:

DENY

ALLOW

UseGoogleDocsAction -> (string)

The ability to use Google Docs actions.

Possible values:

DENY

ALLOW

GoogleDriveAction -> (string)

The ability to perform actions using Google Drive connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleDriveAction -> (string)

The ability to create and update Google Drive actions.

Possible values:

DENY

ALLOW

ShareGoogleDriveAction -> (string)

The ability to share Google Drive actions.

Possible values:

DENY

ALLOW

UseGoogleDriveAction -> (string)

The ability to use Google Drive actions.

Possible values:

DENY

ALLOW

GoogleMeetAction -> (string)

The ability to perform actions using Google Meet connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleMeetAction -> (string)

The ability to create and update Google Meet actions.

Possible values:

DENY

ALLOW

ShareGoogleMeetAction -> (string)

The ability to share Google Meet actions.

Possible values:

DENY

ALLOW

UseGoogleMeetAction -> (string)

The ability to use Google Meet actions.

Possible values:

DENY

ALLOW

GoogleSheetsAction -> (string)

The ability to perform actions using Google Sheets connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleSheetsAction -> (string)

The ability to create and update Google Sheets actions.

Possible values:

DENY

ALLOW

ShareGoogleSheetsAction -> (string)

The ability to share Google Sheets actions.

Possible values:

DENY

ALLOW

UseGoogleSheetsAction -> (string)

The ability to use Google Sheets actions.

Possible values:

DENY

ALLOW

GoogleSlidesAction -> (string)

The ability to perform actions using Google Slides connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleSlidesAction -> (string)

The ability to create and update Google Slides actions.

Possible values:

DENY

ALLOW

ShareGoogleSlidesAction -> (string)

The ability to share Google Slides actions.

Possible values:

DENY

ALLOW

UseGoogleSlidesAction -> (string)

The ability to use Google Slides actions.

Possible values:

DENY

ALLOW

QuickBooksAction -> (string)

The ability to perform actions using QuickBooks connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateQuickBooksAction -> (string)

The ability to create and update QuickBooks actions.

Possible values:

DENY

ALLOW

ShareQuickBooksAction -> (string)

The ability to share QuickBooks actions.

Possible values:

DENY

ALLOW

UseQuickBooksAction -> (string)

The ability to use QuickBooks actions.

Possible values:

DENY

ALLOW

FigmaAction -> (string)

The ability to perform actions using Figma connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateFigmaAction -> (string)

The ability to create and update Figma actions.

Possible values:

DENY

ALLOW

ShareFigmaAction -> (string)

The ability to share Figma actions.

Possible values:

DENY

ALLOW

UseFigmaAction -> (string)

The ability to use Figma actions.

Possible values:

DENY

ALLOW

WhatsAppAction -> (string)

The ability to perform actions using WhatsApp connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateWhatsAppAction -> (string)

The ability to create and update WhatsApp actions.

Possible values:

DENY

ALLOW

ShareWhatsAppAction -> (string)

The ability to share WhatsApp actions.

Possible values:

DENY

ALLOW

UseWhatsAppAction -> (string)

The ability to use WhatsApp actions.

Possible values:

DENY

ALLOW

GoogleChatAction -> (string)

The ability to perform actions using Google Chat connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGoogleChatAction -> (string)

The ability to create and update Google Chat actions.

Possible values:

DENY

ALLOW

ShareGoogleChatAction -> (string)

The ability to share Google Chat actions.

Possible values:

DENY

ALLOW

UseGoogleChatAction -> (string)

The ability to use Google Chat actions.

Possible values:

DENY

ALLOW

OneNoteAction -> (string)

The ability to perform actions using Microsoft OneNote connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateOneNoteAction -> (string)

The ability to create and update Microsoft OneNote actions.

Possible values:

DENY

ALLOW

ShareOneNoteAction -> (string)

The ability to share Microsoft OneNote actions.

Possible values:

DENY

ALLOW

UseOneNoteAction -> (string)

The ability to use Microsoft OneNote actions.

Possible values:

DENY

ALLOW

ShopifyAction -> (string)

The ability to perform actions using Shopify connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateShopifyAction -> (string)

The ability to create and update Shopify actions.

Possible values:

DENY

ALLOW

ShareShopifyAction -> (string)

The ability to share Shopify actions.

Possible values:

DENY

ALLOW

UseShopifyAction -> (string)

The ability to use Shopify actions.

Possible values:

DENY

ALLOW

AdobeAction -> (string)

The ability to perform actions using Adobe Marketing Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateAdobeAction -> (string)

The ability to create and update Adobe Marketing Agent actions.

Possible values:

DENY

ALLOW

ShareAdobeAction -> (string)

The ability to share Adobe Marketing Agent actions.

Possible values:

DENY

ALLOW

UseAdobeAction -> (string)

The ability to use Adobe Marketing Agent actions.

Possible values:

DENY

ALLOW

CiscoWebexVidcastAction -> (string)

The ability to perform actions using Cisco Webex Video Messaging Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateCiscoWebexVidcastAction -> (string)

The ability to create and update Cisco Webex Video Messaging Agent actions.

Possible values:

DENY

ALLOW

ShareCiscoWebexVidcastAction -> (string)

The ability to share Cisco Webex Video Messaging Agent actions.

Possible values:

DENY

ALLOW

UseCiscoWebexVidcastAction -> (string)

The ability to use Cisco Webex Video Messaging Agent actions.

Possible values:

DENY

ALLOW

CiscoWebexMeetingsAction -> (string)

The ability to perform actions using Cisco Webex Meetings connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateCiscoWebexMeetingsAction -> (string)

The ability to create and update Cisco Webex Meetings actions.

Possible values:

DENY

ALLOW

ShareCiscoWebexMeetingsAction -> (string)

The ability to share Cisco Webex Meetings actions.

Possible values:

DENY

ALLOW

UseCiscoWebexMeetingsAction -> (string)

The ability to use Cisco Webex Meetings actions.

Possible values:

DENY

ALLOW

DunAndBradstreetAction -> (string)

The ability to perform actions using Dun and Bradstreet connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateDunAndBradstreetAction -> (string)

The ability to create and update Dun and Bradstreet actions.

Possible values:

DENY

ALLOW

ShareDunAndBradstreetAction -> (string)

The ability to share Dun and Bradstreet actions.

Possible values:

DENY

ALLOW

UseDunAndBradstreetAction -> (string)

The ability to use Dun and Bradstreet actions.

Possible values:

DENY

ALLOW

HGInsightsAction -> (string)

The ability to perform actions using HG Insights Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateHGInsightsAction -> (string)

The ability to create and update HG Insights Agent actions.

Possible values:

DENY

ALLOW

ShareHGInsightsAction -> (string)

The ability to share HG Insights Agent actions.

Possible values:

DENY

ALLOW

UseHGInsightsAction -> (string)

The ability to use HG Insights Agent actions.

Possible values:

DENY

ALLOW

ZoomInfoAction -> (string)

The ability to perform actions using ZoomInfo Agent connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateZoomInfoAction -> (string)

The ability to create and update ZoomInfo Agent actions.

Possible values:

DENY

ALLOW

ShareZoomInfoAction -> (string)

The ability to share ZoomInfo Agent actions.

Possible values:

DENY

ALLOW

UseZoomInfoAction -> (string)

The ability to use ZoomInfo Agent actions.

Possible values:

DENY

ALLOW

MoodysAction -> (string)

The ability to perform actions using Moody’s GenAI Ready Data connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateMoodysAction -> (string)

The ability to create and update Moody’s GenAI Ready Data actions.

Possible values:

DENY

ALLOW

ShareMoodysAction -> (string)

The ability to share Moody’s GenAI Ready Data actions.

Possible values:

DENY

ALLOW

UseMoodysAction -> (string)

The ability to use Moody’s GenAI Ready Data actions.

Possible values:

DENY

ALLOW

BeeAction -> (string)

The ability to perform actions using Bee connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateBeeAction -> (string)

The ability to create and update Bee actions.

Possible values:

DENY

ALLOW

ShareBeeAction -> (string)

The ability to share Bee actions.

Possible values:

DENY

ALLOW

UseBeeAction -> (string)

The ability to use Bee actions.

Possible values:

DENY

ALLOW

GongAction -> (string)

The ability to perform actions using Gong connectors.

Possible values:

DENY

ALLOW

CreateAndUpdateGongAction -> (string)

The ability to create and update Gong actions.

Possible values:

DENY

ALLOW

ShareGongAction -> (string)

The ability to share Gong actions.

Possible values:

DENY

ALLOW

UseGongAction -> (string)

The ability to use Gong actions.

Possible values:

DENY

ALLOW

Topic -> (string)

The ability to perform Topic-related actions.

Possible values:

DENY

ALLOW

EditVisualWithQ -> (string)

The ability to Edit Visual with AI

Possible values:

DENY

ALLOW

BuildCalculatedFieldWithQ -> (string)

The ability to Build Calculation with AI

Possible values:

DENY

ALLOW

CreateDashboardExecutiveSummaryWithQ -> (string)

The ability to Create Executive Summary

Possible values:

DENY

ALLOW

Space -> (string)

The ability to perform space-related actions.

Possible values:

DENY

ALLOW

CreateSpaces -> (string)

The ability to create spaces.

Possible values:

DENY

ALLOW

ShareSpaces -> (string)

The ability to share spaces with other users and groups.

Possible values:

DENY

ALLOW

ChatAgent -> (string)

The ability to perform chat-related actions.

Possible values:

DENY

ALLOW

CreateChatAgents -> (string)

The ability to create chat agents.

Possible values:

DENY

ALLOW

ShareChatAgents -> (string)

The ability to share chat agents with other users and groups.

Possible values:

DENY

ALLOW

Research -> (string)

The ability to perform research-related actions.

Possible values:

DENY

ALLOW

SelfUpgradeUserRole -> (string)

The ability to enable users to upgrade their user role.

Possible values:

DENY

ALLOW

Extension -> (string)

The ability to perform Extension-related actions.

Possible values:

DENY

ALLOW

UseBrowserExtension -> (string)

The ability to use Amazon Quick through the browser extension for Chrome, Firefox, and Edge.

Possible values:

DENY

ALLOW

UseWordAddInExtension -> (string)

The ability to use Amazon Quick through the Microsoft Word add-in.

Possible values:

DENY

ALLOW

UseOutlookAddInExtension -> (string)

The ability to use Amazon Quick through the Microsoft Outlook add-in.

Possible values:

DENY

ALLOW

UseExcelAddInExtension -> (string)

The ability to use Amazon Quick through the Microsoft Excel add-in.

Possible values:

DENY

ALLOW

UsePowerpointAddInExtension -> (string)

The ability to use Amazon Quick through the Microsoft PowerPoint add-in.

Possible values:

DENY

ALLOW

ManageSharedFolders -> (string)

The ability to create, update, delete and view shared folders (both restricted and unrestricted), ability to add any asset to shared folders, and ability to share the folders.

Note: This does not prevent inheriting access to assets that others share with them through folder membership.

Possible values:

DENY

ALLOW

GenerateAnalyses -> (string)

The ability to generate analysis using AI

Possible values:

DENY

ALLOW

Story -> (string)

The ability to perform Story-related actions.

Possible values:

DENY

ALLOW

Scenario -> (string)

The ability to perform Scenario-related actions.

Possible values:

DENY

ALLOW

Trigger -> (string)

The ability to manage trigger-related settings for flows and automations.

Possible values:

DENY

ALLOW

ScheduleTrigger -> (string)

The ability to create, view, edit, delete, and run schedule triggers for flows and automations.

Possible values:

DENY

ALLOW

InboundEmailTrigger -> (string)

The ability to create, view, edit, delete, and run inbound email triggers for flows and automations.

Possible values:

DENY

ALLOW

QuickEventTrigger -> (string)

The ability to create, view, edit, delete, and run Quick event triggers for flows and automations.

Possible values:

DENY

ALLOW

FileDataSource -> (string)

The ability to create, update, and share file data sources.

Possible values:

DENY

ALLOW

CreateFileDataSource -> (string)

The ability to create file data sources.

Possible values:

DENY

ALLOW

UpdateFileDataSource -> (string)

The ability to update file data sources.

Possible values:

DENY

ALLOW

ShareFileDataSource -> (string)

The ability to share file data sources.

Possible values:

DENY

ALLOW

S3DataSource -> (string)

The ability to create, update, and share Amazon S3 data sources.

Possible values:

DENY

ALLOW

CreateS3DataSource -> (string)

The ability to create Amazon S3 data sources.

Possible values:

DENY

ALLOW

UpdateS3DataSource -> (string)

The ability to update Amazon S3 data sources.

Possible values:

DENY

ALLOW

ShareS3DataSource -> (string)

The ability to share Amazon S3 data sources.

Possible values:

DENY

ALLOW

S3AnalyticsDataSource -> (string)

The ability to create, update, and share Amazon S3 Analytics data sources.

Possible values:

DENY

ALLOW

CreateS3AnalyticsDataSource -> (string)

The ability to create Amazon S3 Analytics data sources.

Possible values:

DENY

ALLOW

UpdateS3AnalyticsDataSource -> (string)

The ability to update Amazon S3 Analytics data sources.

Possible values:

DENY

ALLOW

ShareS3AnalyticsDataSource -> (string)

The ability to share Amazon S3 Analytics data sources.

Possible values:

DENY

ALLOW

S3TablesDataSource -> (string)

The ability to create, update, and share Amazon S3 Tables data sources.

Possible values:

DENY

ALLOW

CreateS3TablesDataSource -> (string)

The ability to create Amazon S3 Tables data sources.

Possible values:

DENY

ALLOW

UpdateS3TablesDataSource -> (string)

The ability to update Amazon S3 Tables data sources.

Possible values:

DENY

ALLOW

ShareS3TablesDataSource -> (string)

The ability to share Amazon S3 Tables data sources.

Possible values:

DENY

ALLOW

AthenaDataSource -> (string)

The ability to create, update, and share Amazon Athena data sources.

Possible values:

DENY

ALLOW

CreateAthenaDataSource -> (string)

The ability to create Amazon Athena data sources.

Possible values:

DENY

ALLOW

UpdateAthenaDataSource -> (string)

The ability to update Amazon Athena data sources.

Possible values:

DENY

ALLOW

ShareAthenaDataSource -> (string)

The ability to share Amazon Athena data sources.

Possible values:

DENY

ALLOW

RdsDataSource -> (string)

The ability to create, update, and share auto-discovered Amazon RDS data sources.

Possible values:

DENY

ALLOW

CreateRdsDataSource -> (string)

The ability to create auto-discovered Amazon RDS data sources.

Possible values:

DENY

ALLOW

UpdateRdsDataSource -> (string)

The ability to update auto-discovered Amazon RDS data sources.

Possible values:

DENY

ALLOW

ShareRdsDataSource -> (string)

The ability to share auto-discovered Amazon RDS data sources.

Possible values:

DENY

ALLOW

RedshiftAutoDiscoveredDataSource -> (string)

The ability to create, update, and share auto-discovered Amazon Redshift data sources.

Possible values:

DENY

ALLOW

CreateRedshiftAutoDiscoveredDataSource -> (string)

The ability to create auto-discovered Amazon Redshift data sources.

Possible values:

DENY

ALLOW

UpdateRedshiftAutoDiscoveredDataSource -> (string)

The ability to update auto-discovered Amazon Redshift data sources.

Possible values:

DENY

ALLOW

ShareRedshiftAutoDiscoveredDataSource -> (string)

The ability to share auto-discovered Amazon Redshift data sources.

Possible values:

DENY

ALLOW

RedshiftManualDataSource -> (string)

The ability to create, update, and share manually configured Amazon Redshift data sources.

Possible values:

DENY

ALLOW

CreateRedshiftManualDataSource -> (string)

The ability to create manually configured Amazon Redshift data sources.

Possible values:

DENY

ALLOW

UpdateRedshiftManualDataSource -> (string)

The ability to update manually configured Amazon Redshift data sources.

Possible values:

DENY

ALLOW

ShareRedshiftManualDataSource -> (string)

The ability to share manually configured Amazon Redshift data sources.

Possible values:

DENY

ALLOW

OpenSearchDataSource -> (string)

The ability to create, update, and share Amazon OpenSearch Service data sources.

Possible values:

DENY

ALLOW

CreateOpenSearchDataSource -> (string)

The ability to create Amazon OpenSearch Service data sources.

Possible values:

DENY

ALLOW

UpdateOpenSearchDataSource -> (string)

The ability to update Amazon OpenSearch Service data sources.

Possible values:

DENY

ALLOW

ShareOpenSearchDataSource -> (string)

The ability to share Amazon OpenSearch Service data sources.

Possible values:

DENY

ALLOW

TimestreamDataSource -> (string)

The ability to create, update, and share Amazon Timestream data sources.

Possible values:

DENY

ALLOW

CreateTimestreamDataSource -> (string)

The ability to create Amazon Timestream data sources.

Possible values:

DENY

ALLOW

UpdateTimestreamDataSource -> (string)

The ability to update Amazon Timestream data sources.

Possible values:

DENY

ALLOW

ShareTimestreamDataSource -> (string)

The ability to share Amazon Timestream data sources.

Possible values:

DENY

ALLOW

AuroraDataSource -> (string)

The ability to create, update, and share Amazon Aurora data sources.

Possible values:

DENY

ALLOW

CreateAuroraDataSource -> (string)

The ability to create Amazon Aurora data sources.

Possible values:

DENY

ALLOW

UpdateAuroraDataSource -> (string)

The ability to update Amazon Aurora data sources.

Possible values:

DENY

ALLOW

ShareAuroraDataSource -> (string)

The ability to share Amazon Aurora data sources.

Possible values:

DENY

ALLOW

MySqlDataSource -> (string)

The ability to create, update, and share MySQL data sources.

Possible values:

DENY

ALLOW

CreateMySqlDataSource -> (string)

The ability to create MySQL data sources.

Possible values:

DENY

ALLOW

UpdateMySqlDataSource -> (string)

The ability to update MySQL data sources.

Possible values:

DENY

ALLOW

ShareMySqlDataSource -> (string)

The ability to share MySQL data sources.

Possible values:

DENY

ALLOW

PostgreSqlDataSource -> (string)

The ability to create, update, and share PostgreSQL data sources.

Possible values:

DENY

ALLOW

CreatePostgreSqlDataSource -> (string)

The ability to create PostgreSQL data sources.

Possible values:

DENY

ALLOW

UpdatePostgreSqlDataSource -> (string)

The ability to update PostgreSQL data sources.

Possible values:

DENY

ALLOW

SharePostgreSqlDataSource -> (string)

The ability to share PostgreSQL data sources.

Possible values:

DENY

ALLOW

OracleDataSource -> (string)

The ability to create, update, and share Oracle data sources.

Possible values:

DENY

ALLOW

CreateOracleDataSource -> (string)

The ability to create Oracle data sources.

Possible values:

DENY

ALLOW

UpdateOracleDataSource -> (string)

The ability to update Oracle data sources.

Possible values:

DENY

ALLOW

ShareOracleDataSource -> (string)

The ability to share Oracle data sources.

Possible values:

DENY

ALLOW

SqlServerDataSource -> (string)

The ability to create, update, and share SQL Server data sources.

Possible values:

DENY

ALLOW

CreateSqlServerDataSource -> (string)

The ability to create SQL Server data sources.

Possible values:

DENY

ALLOW

UpdateSqlServerDataSource -> (string)

The ability to update SQL Server data sources.

Possible values:

DENY

ALLOW

ShareSqlServerDataSource -> (string)

The ability to share SQL Server data sources.

Possible values:

DENY

ALLOW

MariaDbDataSource -> (string)

The ability to create, update, and share MariaDB data sources.

Possible values:

DENY

ALLOW

CreateMariaDbDataSource -> (string)

The ability to create MariaDB data sources.

Possible values:

DENY

ALLOW

UpdateMariaDbDataSource -> (string)

The ability to update MariaDB data sources.

Possible values:

DENY

ALLOW

ShareMariaDbDataSource -> (string)

The ability to share MariaDB data sources.

Possible values:

DENY

ALLOW

SnowflakeDataSource -> (string)

The ability to create, update, and share Snowflake data sources.

Possible values:

DENY

ALLOW

CreateSnowflakeDataSource -> (string)

The ability to create Snowflake data sources.

Possible values:

DENY

ALLOW

UpdateSnowflakeDataSource -> (string)

The ability to update Snowflake data sources.

Possible values:

DENY

ALLOW

ShareSnowflakeDataSource -> (string)

The ability to share Snowflake data sources.

Possible values:

DENY

ALLOW

GoogleBigQueryDataSource -> (string)

The ability to create, update, and share Google BigQuery data sources.

Possible values:

DENY

ALLOW

CreateGoogleBigQueryDataSource -> (string)

The ability to create Google BigQuery data sources.

Possible values:

DENY

ALLOW

UpdateGoogleBigQueryDataSource -> (string)

The ability to update Google BigQuery data sources.

Possible values:

DENY

ALLOW

ShareGoogleBigQueryDataSource -> (string)

The ability to share Google BigQuery data sources.

Possible values:

DENY

ALLOW

DatabricksDataSource -> (string)

The ability to create, update, and share Databricks data sources.

Possible values:

DENY

ALLOW

CreateDatabricksDataSource -> (string)

The ability to create Databricks data sources.

Possible values:

DENY

ALLOW

UpdateDatabricksDataSource -> (string)

The ability to update Databricks data sources.

Possible values:

DENY

ALLOW

ShareDatabricksDataSource -> (string)

The ability to share Databricks data sources.

Possible values:

DENY

ALLOW

StarburstDataSource -> (string)

The ability to create, update, and share Starburst data sources.

Possible values:

DENY

ALLOW

CreateStarburstDataSource -> (string)

The ability to create Starburst data sources.

Possible values:

DENY

ALLOW

UpdateStarburstDataSource -> (string)

The ability to update Starburst data sources.

Possible values:

DENY

ALLOW

ShareStarburstDataSource -> (string)

The ability to share Starburst data sources.

Possible values:

DENY

ALLOW

TrinoDataSource -> (string)

The ability to create, update, and share Trino data sources.

Possible values:

DENY

ALLOW

CreateTrinoDataSource -> (string)

The ability to create Trino data sources.

Possible values:

DENY

ALLOW

UpdateTrinoDataSource -> (string)

The ability to update Trino data sources.

Possible values:

DENY

ALLOW

ShareTrinoDataSource -> (string)

The ability to share Trino data sources.

Possible values:

DENY

ALLOW

ImpalaDataSource -> (string)

The ability to create, update, and share Impala data sources.

Possible values:

DENY

ALLOW

CreateImpalaDataSource -> (string)

The ability to create Impala data sources.

Possible values:

DENY

ALLOW

UpdateImpalaDataSource -> (string)

The ability to update Impala data sources.

Possible values:

DENY

ALLOW

ShareImpalaDataSource -> (string)

The ability to share Impala data sources.

Possible values:

DENY

ALLOW

TeradataDataSource -> (string)

The ability to create, update, and share Teradata data sources.

Possible values:

DENY

ALLOW

CreateTeradataDataSource -> (string)

The ability to create Teradata data sources.

Possible values:

DENY

ALLOW

UpdateTeradataDataSource -> (string)

The ability to update Teradata data sources.

Possible values:

DENY

ALLOW

ShareTeradataDataSource -> (string)

The ability to share Teradata data sources.

Possible values:

DENY

ALLOW

PrestoDataSource -> (string)

The ability to create, update, and share Presto data sources.

Possible values:

DENY

ALLOW

CreatePrestoDataSource -> (string)

The ability to create Presto data sources.

Possible values:

DENY

ALLOW

UpdatePrestoDataSource -> (string)

The ability to update Presto data sources.

Possible values:

DENY

ALLOW

SharePrestoDataSource -> (string)

The ability to share Presto data sources.

Possible values:

DENY

ALLOW

SparkDataSource -> (string)

The ability to create, update, and share Spark data sources.

Possible values:

DENY

ALLOW

CreateSparkDataSource -> (string)

The ability to create Spark data sources.

Possible values:

DENY

ALLOW

UpdateSparkDataSource -> (string)

The ability to update Spark data sources.

Possible values:

DENY

ALLOW

ShareSparkDataSource -> (string)

The ability to share Spark data sources.

Possible values:

DENY

ALLOW

ExasolDataSource -> (string)

The ability to create, update, and share Exasol data sources.

Possible values:

DENY

ALLOW

CreateExasolDataSource -> (string)

The ability to create Exasol data sources.

Possible values:

DENY

ALLOW

UpdateExasolDataSource -> (string)

The ability to update Exasol data sources.

Possible values:

DENY

ALLOW

ShareExasolDataSource -> (string)

The ability to share Exasol data sources.

Possible values:

DENY

ALLOW

Db2DataSource -> (string)

The ability to create, update, and share Db2 data sources.

Possible values:

DENY

ALLOW

CreateDb2DataSource -> (string)

The ability to create Db2 data sources.

Possible values:

DENY

ALLOW

UpdateDb2DataSource -> (string)

The ability to update Db2 data sources.

Possible values:

DENY

ALLOW

ShareDb2DataSource -> (string)

The ability to share Db2 data sources.

Possible values:

DENY

ALLOW

SapHanaDataSource -> (string)

The ability to create, update, and share SAP HANA data sources.

Possible values:

DENY

ALLOW

CreateSapHanaDataSource -> (string)

The ability to create SAP HANA data sources.

Possible values:

DENY

ALLOW

UpdateSapHanaDataSource -> (string)

The ability to update SAP HANA data sources.

Possible values:

DENY

ALLOW

ShareSapHanaDataSource -> (string)

The ability to share SAP HANA data sources.

Possible values:

DENY

ALLOW

DenodoDataSource -> (string)

The ability to create, update, and share Denodo data sources.

Possible values:

DENY

ALLOW

CreateDenodoDataSource -> (string)

The ability to create Denodo data sources.

Possible values:

DENY

ALLOW

UpdateDenodoDataSource -> (string)

The ability to update Denodo data sources.

Possible values:

DENY

ALLOW

ShareDenodoDataSource -> (string)

The ability to share Denodo data sources.

Possible values:

DENY

ALLOW

DremioDataSource -> (string)

The ability to create, update, and share Dremio data sources.

Possible values:

DENY

ALLOW

CreateDremioDataSource -> (string)

The ability to create Dremio data sources.

Possible values:

DENY

ALLOW

UpdateDremioDataSource -> (string)

The ability to update Dremio data sources.

Possible values:

DENY

ALLOW

ShareDremioDataSource -> (string)

The ability to share Dremio data sources.

Possible values:

DENY

ALLOW

SalesforceDataSource -> (string)

The ability to create, update, and share Salesforce data sources.

Possible values:

DENY

ALLOW

CreateSalesforceDataSource -> (string)

The ability to create Salesforce data sources.

Possible values:

DENY

ALLOW

UpdateSalesforceDataSource -> (string)

The ability to update Salesforce data sources.

Possible values:

DENY

ALLOW

ShareSalesforceDataSource -> (string)

The ability to share Salesforce data sources.

Possible values:

DENY

ALLOW

RadiantDataSource -> (string)

The ability to create, update, and share Amazon QuickSight data sources.

Possible values:

DENY

ALLOW

CreateRadiantDataSource -> (string)

The ability to create Amazon QuickSight data sources.

Possible values:

DENY

ALLOW

UpdateRadiantDataSource -> (string)

The ability to update Amazon QuickSight data sources.

Possible values:

DENY

ALLOW

ShareRadiantDataSource -> (string)

The ability to share Amazon QuickSight data sources.

Possible values:

DENY

ALLOW

PayPalDataSource -> (string)

The ability to create, update, and share PayPal data sources.

Possible values:

DENY

ALLOW

CreatePayPalDataSource -> (string)

The ability to create PayPal data sources.

Possible values:

DENY

ALLOW

UpdatePayPalDataSource -> (string)

The ability to update PayPal data sources.

Possible values:

DENY

ALLOW

SharePayPalDataSource -> (string)

The ability to share PayPal data sources.

Possible values:

DENY

ALLOW

SquareDataSource -> (string)

The ability to create, update, and share Square data sources.

Possible values:

DENY

ALLOW

CreateSquareDataSource -> (string)

The ability to create Square data sources.

Possible values:

DENY

ALLOW

UpdateSquareDataSource -> (string)

The ability to update Square data sources.

Possible values:

DENY

ALLOW

ShareSquareDataSource -> (string)

The ability to share Square data sources.

Possible values:

DENY

ALLOW

GitHubDataSource -> (string)

The ability to create, update, and share GitHub data sources.

Possible values:

DENY

ALLOW

CreateGitHubDataSource -> (string)

The ability to create GitHub data sources.

Possible values:

DENY

ALLOW

UpdateGitHubDataSource -> (string)

The ability to update GitHub data sources.

Possible values:

DENY

ALLOW

ShareGitHubDataSource -> (string)

The ability to share GitHub data sources.

Possible values:

DENY

ALLOW

TwitterDataSource -> (string)

The ability to create, update, and share Twitter data sources.

Possible values:

DENY

ALLOW

CreateTwitterDataSource -> (string)

The ability to create Twitter data sources.

Possible values:

DENY

ALLOW

UpdateTwitterDataSource -> (string)

The ability to update Twitter data sources.

Possible values:

DENY

ALLOW

ShareTwitterDataSource -> (string)

The ability to share Twitter data sources.

Possible values:

DENY

ALLOW

JiraDataSource -> (string)

The ability to create, update, and share Jira data sources.

Possible values:

DENY

ALLOW

CreateJiraDataSource -> (string)

The ability to create Jira data sources.

Possible values:

DENY

ALLOW

UpdateJiraDataSource -> (string)

The ability to update Jira data sources.

Possible values:

DENY

ALLOW

ShareJiraDataSource -> (string)

The ability to share Jira data sources.

Possible values:

DENY

ALLOW

ServiceNowDataSource -> (string)

The ability to create, update, and share ServiceNow data sources.

Possible values:

DENY

ALLOW

CreateServiceNowDataSource -> (string)

The ability to create ServiceNow data sources.

Possible values:

DENY

ALLOW

UpdateServiceNowDataSource -> (string)

The ability to update ServiceNow data sources.

Possible values:

DENY

ALLOW

ShareServiceNowDataSource -> (string)

The ability to share ServiceNow data sources.

Possible values:

DENY

ALLOW

AdobeAnalyticsDataSource -> (string)

The ability to create, update, and share Adobe Analytics data sources.

Possible values:

DENY

ALLOW

CreateAdobeAnalyticsDataSource -> (string)

The ability to create Adobe Analytics data sources.

Possible values:

DENY

ALLOW

UpdateAdobeAnalyticsDataSource -> (string)

The ability to update Adobe Analytics data sources.

Possible values:

DENY

ALLOW

ShareAdobeAnalyticsDataSource -> (string)

The ability to share Adobe Analytics data sources.

Possible values:

DENY

ALLOW

GoogleAnalyticsDataSource -> (string)

The ability to create, update, and share Google Analytics data sources.

Possible values:

DENY

ALLOW

CreateGoogleAnalyticsDataSource -> (string)

The ability to create Google Analytics data sources.

Possible values:

DENY

ALLOW

UpdateGoogleAnalyticsDataSource -> (string)

The ability to update Google Analytics data sources.

Possible values:

DENY

ALLOW

ShareGoogleAnalyticsDataSource -> (string)

The ability to share Google Analytics data sources.

Possible values:

DENY

ALLOW

GoogleSheetsDataSource -> (string)

The ability to create, update, and share Google Sheets data sources.

Possible values:

DENY

ALLOW

CreateGoogleSheetsDataSource -> (string)

The ability to create Google Sheets data sources.

Possible values:

DENY

ALLOW

UpdateGoogleSheetsDataSource -> (string)

The ability to update Google Sheets data sources.

Possible values:

DENY

ALLOW

ShareGoogleSheetsDataSource -> (string)

The ability to share Google Sheets data sources.

Possible values:

DENY

ALLOW

DocumentDbDataSource -> (string)

The ability to create, update, and share Amazon DocumentDB data sources.

Possible values:

DENY

ALLOW

CreateDocumentDbDataSource -> (string)

The ability to create Amazon DocumentDB data sources.

Possible values:

DENY

ALLOW

UpdateDocumentDbDataSource -> (string)

The ability to update Amazon DocumentDB data sources.

Possible values:

DENY

ALLOW

ShareDocumentDbDataSource -> (string)

The ability to share Amazon DocumentDB data sources.

Possible values:

DENY

ALLOW

MongoDbDataSource -> (string)

The ability to create, update, and share MongoDB data sources.

Possible values:

DENY

ALLOW

CreateMongoDbDataSource -> (string)

The ability to create MongoDB data sources.

Possible values:

DENY

ALLOW

UpdateMongoDbDataSource -> (string)

The ability to update MongoDB data sources.

Possible values:

DENY

ALLOW

ShareMongoDbDataSource -> (string)

The ability to share MongoDB data sources.

Possible values:

DENY

ALLOW

MongoAtlasDataSource -> (string)

The ability to create, update, and share MongoDB Atlas data sources.

Possible values:

DENY

ALLOW

CreateMongoAtlasDataSource -> (string)

The ability to create MongoDB Atlas data sources.

Possible values:

DENY

ALLOW

UpdateMongoAtlasDataSource -> (string)

The ability to update MongoDB Atlas data sources.

Possible values:

DENY

ALLOW

ShareMongoAtlasDataSource -> (string)

The ability to share MongoDB Atlas data sources.

Possible values:

DENY

ALLOW

DynamoDbDataSource -> (string)

The ability to create, update, and share Amazon DynamoDB data sources.

Possible values:

DENY

ALLOW

CreateDynamoDbDataSource -> (string)

The ability to create Amazon DynamoDB data sources.

Possible values:

DENY

ALLOW

UpdateDynamoDbDataSource -> (string)

The ability to update Amazon DynamoDB data sources.

Possible values:

DENY

ALLOW

ShareDynamoDbDataSource -> (string)

The ability to share Amazon DynamoDB data sources.

Possible values:

DENY

ALLOW

Governance -> (structure)

The governance configuration for the custom permissions profile. When you enable governance for a category, Amazon Quick denies access to any current or new capability in that category unless you explicitly set that capability to ALLOW in Capabilities .

DefaultCategoryEffects -> (map)

A map of DefaultCategoryEffects .

Constraints:

max: 50

key -> (string)

The name of a governance category. A governance category groups related capabilities so that you can apply a default effect to all capabilities in the category at once. Valid values:

AI – Capabilities related to Amazon Quick AI features.

Constraints:

min: 1

max: 128

value -> (string)

The default effect that Amazon Quick applies to capabilities in a governed category when you do not explicitly list those capabilities in Capabilities . Valid values:

DENY_BY_DEFAULT – Amazon Quick denies any capability access in the given category that the profile does not explicitly set to ALLOW .

Possible values:

DENY_BY_DEFAULT

RequestId -> (string)

The Amazon Web Services request ID for this operation.

Table of Contents

Feedback

User Guide