Policy: AWSDirectoryServiceDataFullAccess ARN: arn:aws:iam::aws:policy/AWSDirectoryServiceDataFullAccess Allowed Actions Actions Services ds:AccessDSData ds ds-data:AddGroupMember ds-data ds-data:CreateGroup ds-data ds-data:CreateUser ds-data ds-data:DeleteGroup ds-data ds-data:DeleteUser ds-data ds-data:DescribeGroup ds-data ds-data:DescribeUser ds-data ds-data:DisableUser ds-data ds-data:ListGroupMembers ds-data ds-data:ListGroups ds-data ds-data:ListGroupsForMember ds-data ds-data:ListUsers ds-data ds-data:RemoveGroupMember ds-data ds-data:SearchGroups ds-data ds-data:SearchUsers ds-data ds-data:UpdateGroup ds-data ds-data:UpdateUser ds-data