update_theme_permissions

QuickSight.Client.update_theme_permissions(**kwargs)

Updates the resource permissions for a theme. Permissions apply to the action to grant or revoke permissions on, for example "quicksight:DescribeTheme" .

Theme permissions apply in groupings. Valid groupings include the following for the three levels of permissions, which are user, owner, or no permissions:

• User
  • "quicksight:DescribeTheme"
  • "quicksight:DescribeThemeAlias"
  • "quicksight:ListThemeAliases"
  • "quicksight:ListThemeVersions"
• Owner
  • "quicksight:DescribeTheme"
  • "quicksight:DescribeThemeAlias"
  • "quicksight:ListThemeAliases"
  • "quicksight:ListThemeVersions"
  • "quicksight:DeleteTheme"
  • "quicksight:UpdateTheme"
  • "quicksight:CreateThemeAlias"
  • "quicksight:DeleteThemeAlias"
  • "quicksight:UpdateThemeAlias"
  • "quicksight:UpdateThemePermissions"
  • "quicksight:DescribeThemePermissions"
• To specify no permissions, omit the permissions list.

See also: AWS API Documentation

Request Syntax

response = client.update_theme_permissions(
    AwsAccountId='string',
    ThemeId='string',
    GrantPermissions=[
        {
            'Principal': 'string',
            'Actions': [
                'string',
            ]
        },
    ],
    RevokePermissions=[
        {
            'Principal': 'string',
            'Actions': [
                'string',
            ]
        },
    ]
)

Parameters

• AwsAccountId (string) --

  [REQUIRED]

  The ID of the Amazon Web Services account that contains the theme.

• ThemeId (string) --

  [REQUIRED]

  The ID for the theme.

• GrantPermissions (list) --

  A list of resource permissions to be granted for the theme.

  • (dict) --

    Permission for the resource.

    • Principal (string) -- [REQUIRED]

      The Amazon Resource Name (ARN) of the principal. This can be one of the following:

      • The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)
      • The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)
      • The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.)
    • Actions (list) -- [REQUIRED]

      The IAM action to grant or revoke permissions on.

      • (string) --
• RevokePermissions (list) --

  A list of resource permissions to be revoked from the theme.

  • (dict) --

    Permission for the resource.

    • Principal (string) -- [REQUIRED]

      The Amazon Resource Name (ARN) of the principal. This can be one of the following:

      • The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)
      • The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)
      • The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.)
    • Actions (list) -- [REQUIRED]

      The IAM action to grant or revoke permissions on.

      • (string) --

Return type

dict

Returns

Response Syntax

{
    'ThemeId': 'string',
    'ThemeArn': 'string',
    'Permissions': [
        {
            'Principal': 'string',
            'Actions': [
                'string',
            ]
        },
    ],
    'RequestId': 'string',
    'Status': 123
}

Response Structure

• (dict) --

  • ThemeId (string) --

    The ID for the theme.

  • ThemeArn (string) --

    The Amazon Resource Name (ARN) of the theme.

  • Permissions (list) --

    The resulting list of resource permissions for the theme.

    • (dict) --

      Permission for the resource.

      • Principal (string) --

        The Amazon Resource Name (ARN) of the principal. This can be one of the following:

        • The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)
        • The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)
        • The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.)

      • Actions (list) --

        The IAM action to grant or revoke permissions on.

        • (string) --

  • RequestId (string) --

    The Amazon Web Services request ID for this operation.

  • Status (integer) --

    The HTTP status of the request.

Exceptions

• QuickSight.Client.exceptions.AccessDeniedException
• QuickSight.Client.exceptions.InvalidParameterValueException
• QuickSight.Client.exceptions.ResourceNotFoundException
• QuickSight.Client.exceptions.ThrottlingException
• QuickSight.Client.exceptions.UnsupportedUserEditionException
• QuickSight.Client.exceptions.LimitExceededException
• QuickSight.Client.exceptions.InternalFailureException