Policy: IAMAccessAdvisorReadOnly ARN: arn:aws:iam::aws:policy/IAMAccessAdvisorReadOnly Allowed Actions Actions Services iam:GenerateCredentialReport iam iam:GenerateOrganizationsAccessReport iam iam:GenerateServiceLastAccessedDetails iam iam:GetOrganizationsAccessReport iam iam:GetPolicy iam iam:GetRole iam iam:GetServiceLastAccessedDetails iam iam:GetServiceLastAccessedDetailsWithEntities iam iam:ListGroups iam iam:ListPolicies iam iam:ListPoliciesGrantingServiceAccess iam iam:ListRoles iam iam:ListUsers iam organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:DescribeOrganizationalUnit organizations organizations:DescribePolicy organizations organizations:ListChildren organizations organizations:ListParents organizations organizations:ListPolicies organizations organizations:ListPoliciesForTarget organizations organizations:ListRoots organizations organizations:ListTargetsForPolicy organizations