stats/actions/sso
sso:AssociateDirectory;Write
sso:AssociateProfile;Write
sso:AttachCustomerManagedPolicyReferenceToPermissionSet;Permissions management
sso:AttachManagedPolicyToPermissionSet;Permissions management
sso:CreateAccountAssignment;Write
sso:CreateApplication;Write
sso:CreateApplicationAssignment;Write
sso:CreateApplicationInstance;Write
sso:CreateApplicationInstanceCertificate;Write
sso:CreateInstance;Write
sso:CreateInstanceAccessControlAttributeConfiguration;Write
sso:CreateManagedApplicationInstance;Write
sso:CreatePermissionSet;Write
sso:CreateProfile;Write
sso:CreateTrust;Write
sso:CreateTrustedTokenIssuer;Write
sso:DeleteAccountAssignment;Write
sso:DeleteApplication;Write
sso:DeleteApplicationAccessScope;Write
sso:DeleteApplicationAssignment;Write
sso:DeleteApplicationAuthenticationMethod;Write
sso:DeleteApplicationGrant;Write
sso:DeleteApplicationInstance;Write
sso:DeleteApplicationInstanceCertificate;Write
sso:DeleteInlinePolicyFromPermissionSet;Write
sso:DeleteInstance;Write
sso:DeleteInstanceAccessControlAttributeConfiguration;Write
sso:DeleteManagedApplicationInstance;Write
sso:DeletePermissionSet;Write
sso:DeletePermissionsBoundaryFromPermissionSet;Permissions management
sso:DeletePermissionsPolicy;Permissions management
sso:DeleteProfile;Write
sso:DeleteTrustedTokenIssuer;Write
sso:DescribeAccountAssignmentCreationStatus;Read
sso:DescribeAccountAssignmentDeletionStatus;Read
sso:DescribeApplication;Read
sso:DescribeApplicationAssignment;Read
sso:DescribeApplicationProvider;Read
sso:DescribeDirectories;Read
sso:DescribeInstance;Read
sso:DescribeInstanceAccessControlAttributeConfiguration;Read
sso:DescribePermissionSet;Read
sso:DescribePermissionSetProvisioningStatus;Read
sso:DescribePermissionsPolicies;Read
sso:DescribeRegisteredRegions;Read
sso:DescribeTrustedTokenIssuer;Read
sso:DescribeTrusts;Read
sso:DetachCustomerManagedPolicyReferenceFromPermissionSet;Permissions management
sso:DetachManagedPolicyFromPermissionSet;Permissions management
sso:DisassociateDirectory;Write
sso:DisassociateProfile;Write
sso:GetApplicationAccessScope;Read
sso:GetApplicationAssignmentConfiguration;Read
sso:GetApplicationAuthenticationMethod;Read
sso:GetApplicationGrant;Read
sso:GetApplicationInstance;Read
sso:GetApplicationTemplate;Read
sso:GetInlinePolicyForPermissionSet;Read
sso:GetManagedApplicationInstance;Read
sso:GetMfaDeviceManagementForDirectory;Read
sso:GetPermissionSet;Read
sso:GetPermissionsBoundaryForPermissionSet;Read
sso:GetPermissionsPolicy;Read
sso:GetProfile;Read
sso:GetSSOStatus;Read
sso:GetSharedSsoConfiguration;Read
sso:GetSsoConfiguration;Read
sso:GetTrust;Read
sso:ImportApplicationInstanceServiceProviderMetadata;Write
sso:ListAccountAssignmentCreationStatus;List
sso:ListAccountAssignmentDeletionStatus;List
sso:ListAccountAssignments;List
sso:ListAccountAssignmentsForPrincipal;List
sso:ListAccountsForProvisionedPermissionSet;List
sso:ListApplicationAccessScopes;List
sso:ListApplicationAssignments;List
sso:ListApplicationAssignmentsForPrincipal;List
sso:ListApplicationAuthenticationMethods;List
sso:ListApplicationGrants;List
sso:ListApplicationInstanceCertificates;Read
sso:ListApplicationInstances;List
sso:ListApplicationProviders;List
sso:ListApplicationTemplates;List
sso:ListApplications;List
sso:ListCustomerManagedPolicyReferencesInPermissionSet;List
sso:ListDirectoryAssociations;Read
sso:ListInstances;List
sso:ListManagedPoliciesInPermissionSet;List
sso:ListPermissionSetProvisioningStatus;List
sso:ListPermissionSets;List
sso:ListPermissionSetsProvisionedToAccount;List
sso:ListProfileAssociations;Read
sso:ListProfiles;List
sso:ListTagsForResource;Read
sso:ListTrustedTokenIssuers;List
sso:ProvisionPermissionSet;Write
sso:PutApplicationAccessScope;Write
sso:PutApplicationAssignmentConfiguration;Write
sso:PutApplicationAuthenticationMethod;Write
sso:PutApplicationGrant;Write
sso:PutInlinePolicyToPermissionSet;Write
sso:PutMfaDeviceManagementForDirectory;Write
sso:PutPermissionsBoundaryToPermissionSet;Permissions management
sso:PutPermissionsPolicy;Permissions management
sso:SearchGroups;Read
sso:SearchUsers;Read
sso:StartSSO;Write
sso:TagResource;Tagging
sso:UntagResource;Tagging
sso:UpdateApplication;Write
sso:UpdateApplicationInstanceActiveCertificate;Write
sso:UpdateApplicationInstanceDisplayData;Write
sso:UpdateApplicationInstanceResponseConfiguration;Write
sso:UpdateApplicationInstanceResponseSchemaConfiguration;Write
sso:UpdateApplicationInstanceSecurityConfiguration;Write
sso:UpdateApplicationInstanceServiceProviderConfiguration;Write
sso:UpdateApplicationInstanceStatus;Write
sso:UpdateDirectoryAssociation;Write
sso:UpdateInstance;Write
sso:UpdateInstanceAccessControlAttributeConfiguration;Write
sso:UpdateManagedApplicationInstanceStatus;Write
sso:UpdatePermissionSet;Permissions management
sso:UpdateProfile;Write
sso:UpdateSSOConfiguration;Write
sso:UpdateTrust;Write
sso:UpdateTrustedTokenIssuer;Write