SSOAdmin / Client / create_permission_set

create_permission_set#

SSOAdmin.Client.create_permission_set(**kwargs)#

Creates a permission set within a specified IAM Identity Center instance.

Note

To grant users and groups access to Amazon Web Services account resources, use ``CreateAccountAssignment ``.

See also: AWS API Documentation

Request Syntax

response = client.create_permission_set(
    Description='string',
    InstanceArn='string',
    Name='string',
    RelayState='string',
    SessionDuration='string',
    Tags=[
        {
            'Key': 'string',
            'Value': 'string'
        },
    ]
)
Parameters:

  • Description (string) – The description of the PermissionSet.

  • InstanceArn (string) –

    [REQUIRED]

    The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.

  • Name (string) –

    [REQUIRED]

    The name of the PermissionSet.

  • RelayState (string) – Used to redirect users within the application during the federation authentication process.

  • SessionDuration (string) – The length of time that the application user sessions are valid in the ISO-8601 standard.

  • Tags (list) –

    The tags to attach to the new PermissionSet.

    • (dict) –

      A set of key-value pairs that are used to manage the resource. Tags can only be applied to permission sets and cannot be applied to corresponding roles that IAM Identity Center creates in Amazon Web Services accounts.

      • Key (string) – [REQUIRED]

        The key for the tag.

      • Value (string) – [REQUIRED]

        The value of the tag.

Return type:

dict

Returns:

Response Syntax

{
    'PermissionSet': {
        'CreatedDate': datetime(2015, 1, 1),
        'Description': 'string',
        'Name': 'string',
        'PermissionSetArn': 'string',
        'RelayState': 'string',
        'SessionDuration': 'string'
    }
}

Response Structure

  • (dict) –

    • PermissionSet (dict) –

      Defines the level of access on an Amazon Web Services account.

      • CreatedDate (datetime) –

        The date that the permission set was created.

      • Description (string) –

        The description of the PermissionSet.

      • Name (string) –

        The name of the permission set.

      • PermissionSetArn (string) –

        The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces in the Amazon Web Services General Reference.

      • RelayState (string) –

        Used to redirect users within the application during the federation authentication process.

      • SessionDuration (string) –

        The length of time that the application user sessions are valid for in the ISO-8601 standard.

Exceptions

  • SSOAdmin.Client.exceptions.ServiceQuotaExceededException

  • SSOAdmin.Client.exceptions.ThrottlingException

  • SSOAdmin.Client.exceptions.InternalServerException

  • SSOAdmin.Client.exceptions.ResourceNotFoundException

  • SSOAdmin.Client.exceptions.AccessDeniedException

  • SSOAdmin.Client.exceptions.ValidationException

  • SSOAdmin.Client.exceptions.ConflictException