SSOAdmin / Client / create_permission_set

create_permission_set#

SSOAdmin.Client.create_permission_set(**kwargs)#

Creates a permission set within a specified IAM Identity Center instance.

Note

To grant users and groups access to AWS account resources, use ``CreateAccountAssignment ``.

See also: AWS API Documentation

Request Syntax

response = client.create_permission_set(
    Name='string',
    Description='string',
    InstanceArn='string',
    SessionDuration='string',
    RelayState='string',
    Tags=[
        {
            'Key': 'string',
            'Value': 'string'
        },
    ]
)
Parameters:

  • Name (string) –

    [REQUIRED]

    The name of the PermissionSet.

  • Description (string) – The description of the PermissionSet.

  • InstanceArn (string) –

    [REQUIRED]

    The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

  • SessionDuration (string) – The length of time that the application user sessions are valid in the ISO-8601 standard.

  • RelayState (string) – Used to redirect users within the application during the federation authentication process.

  • Tags (list) –

    The tags to attach to the new PermissionSet.

    • (dict) –

      A set of key-value pairs that are used to manage the resource. Tags can only be applied to permission sets and cannot be applied to corresponding roles that IAM Identity Center creates in AWS accounts.

      • Key (string) – [REQUIRED]

        The key for the tag.

      • Value (string) – [REQUIRED]

        The value of the tag.

Return type:

dict

Returns:

Response Syntax

{
    'PermissionSet': {
        'Name': 'string',
        'PermissionSetArn': 'string',
        'Description': 'string',
        'CreatedDate': datetime(2015, 1, 1),
        'SessionDuration': 'string',
        'RelayState': 'string'
    }
}

Response Structure

  • (dict) –

    • PermissionSet (dict) –

      Defines the level of access on an AWS account.

      • Name (string) –

        The name of the permission set.

      • PermissionSetArn (string) –

        The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.

      • Description (string) –

        The description of the PermissionSet.

      • CreatedDate (datetime) –

        The date that the permission set was created.

      • SessionDuration (string) –

        The length of time that the application user sessions are valid for in the ISO-8601 standard.

      • RelayState (string) –

        Used to redirect users within the application during the federation authentication process.

Exceptions

  • SSOAdmin.Client.exceptions.ResourceNotFoundException

  • SSOAdmin.Client.exceptions.InternalServerException

  • SSOAdmin.Client.exceptions.ServiceQuotaExceededException

  • SSOAdmin.Client.exceptions.ThrottlingException

  • SSOAdmin.Client.exceptions.ValidationException

  • SSOAdmin.Client.exceptions.AccessDeniedException

  • SSOAdmin.Client.exceptions.ConflictException