update_theme_permissions

update_theme_permissions(**kwargs)

Updates the resource permissions for a theme. Permissions apply to the action to grant or revoke permissions on, for example "quicksight:DescribeTheme" .

Theme permissions apply in groupings. Valid groupings include the following for the three levels of permissions, which are user, owner, or no permissions:

  • User
    • "quicksight:DescribeTheme"
    • "quicksight:DescribeThemeAlias"
    • "quicksight:ListThemeAliases"
    • "quicksight:ListThemeVersions"
  • Owner
    • "quicksight:DescribeTheme"
    • "quicksight:DescribeThemeAlias"
    • "quicksight:ListThemeAliases"
    • "quicksight:ListThemeVersions"
    • "quicksight:DeleteTheme"
    • "quicksight:UpdateTheme"
    • "quicksight:CreateThemeAlias"
    • "quicksight:DeleteThemeAlias"
    • "quicksight:UpdateThemeAlias"
    • "quicksight:UpdateThemePermissions"
    • "quicksight:DescribeThemePermissions"
  • To specify no permissions, omit the permissions list.

See also: AWS API Documentation

Request Syntax

response = client.update_theme_permissions(
    AwsAccountId='string',
    ThemeId='string',
    GrantPermissions=[
        {
            'Principal': 'string',
            'Actions': [
                'string',
            ]
        },
    ],
    RevokePermissions=[
        {
            'Principal': 'string',
            'Actions': [
                'string',
            ]
        },
    ]
)
Parameters
  • AwsAccountId (string) --

    [REQUIRED]

    The ID of the Amazon Web Services account that contains the theme.

  • ThemeId (string) --

    [REQUIRED]

    The ID for the theme.

  • GrantPermissions (list) --

    A list of resource permissions to be granted for the theme.

    • (dict) --

      Permission for the resource.

      • Principal (string) -- [REQUIRED]

        The Amazon Resource Name (ARN) of the principal. This can be one of the following:

        • The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)
        • The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)
        • The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.)
      • Actions (list) -- [REQUIRED]

        The IAM action to grant or revoke permissions on.

        • (string) --
  • RevokePermissions (list) --

    A list of resource permissions to be revoked from the theme.

    • (dict) --

      Permission for the resource.

      • Principal (string) -- [REQUIRED]

        The Amazon Resource Name (ARN) of the principal. This can be one of the following:

        • The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)
        • The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)
        • The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.)
      • Actions (list) -- [REQUIRED]

        The IAM action to grant or revoke permissions on.

        • (string) --
Return type

dict

Returns

Response Syntax

{
    'ThemeId': 'string',
    'ThemeArn': 'string',
    'Permissions': [
        {
            'Principal': 'string',
            'Actions': [
                'string',
            ]
        },
    ],
    'RequestId': 'string',
    'Status': 123
}

Response Structure

  • (dict) --

    • ThemeId (string) --

      The ID for the theme.

    • ThemeArn (string) --

      The Amazon Resource Name (ARN) of the theme.

    • Permissions (list) --

      The resulting list of resource permissions for the theme.

      • (dict) --

        Permission for the resource.

        • Principal (string) --

          The Amazon Resource Name (ARN) of the principal. This can be one of the following:

          • The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)
          • The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)
          • The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.)
        • Actions (list) --

          The IAM action to grant or revoke permissions on.

          • (string) --
    • RequestId (string) --

      The Amazon Web Services request ID for this operation.

    • Status (integer) --

      The HTTP status of the request.

Exceptions

  • QuickSight.Client.exceptions.AccessDeniedException
  • QuickSight.Client.exceptions.InvalidParameterValueException
  • QuickSight.Client.exceptions.ResourceNotFoundException
  • QuickSight.Client.exceptions.ThrottlingException
  • QuickSight.Client.exceptions.UnsupportedUserEditionException
  • QuickSight.Client.exceptions.LimitExceededException
  • QuickSight.Client.exceptions.InternalFailureException