Policy: AWSSSOServiceRolePolicy

ARN: arn:aws:iam::aws:policy/aws-service-role/AWSSSOServiceRolePolicy

Allowed Actions

Actions	Services
ds:DescribeDirectories	ds
ds:DescribeTrusts	ds
ds:UnauthorizeApplication	ds
iam:AttachRolePolicy	iam
iam:CreateRole	iam
iam:CreateSAMLProvider	iam
iam:DeleteRole	iam
iam:DeleteRole	iam
iam:DeleteRolePermissionsBoundary	iam
iam:DeleteRolePolicy	iam
iam:DeleteSAMLProvider	iam
iam:DeleteServiceLinkedRole	iam
iam:DetachRolePolicy	iam
iam:GetRole	iam
iam:GetRole	iam
iam:GetSAMLProvider	iam
iam:GetServiceLinkedRoleDeletionStatus	iam
iam:ListAttachedRolePolicies	iam
iam:ListRolePolicies	iam
iam:ListRoles	iam
iam:PutRolePermissionsBoundary	iam
iam:PutRolePolicy	iam
iam:UpdateAssumeRolePolicy	iam
iam:UpdateRole	iam
iam:UpdateRoleDescription	iam
iam:UpdateSAMLProvider	iam
identity-sync:DeleteSyncProfile	identity-sync
identitystore:DescribeGroup	identitystore
identitystore:DescribeUser	identitystore
identitystore:ListGroups	identitystore
identitystore:ListUsers	identitystore
organizations:DescribeAccount	organizations
organizations:DescribeOrganization	organizations
organizations:ListAWSServiceAccessForOrganization	organizations
organizations:ListAccounts	organizations
organizations:ListDelegatedAdministrators	organizations