Permission Set Assignments

Grants of one permission set to one user or group on one AWS account, the records behind the IAM roles that actually exist. Creating one is only accepted here and provisioned in the background, so an assignment is not live the moment the call returns.

List permission set assignments

Returns the permission set assignments in your tenant. An assignment is

Assign a permission set

Grants one permission set to one user or group across one or more AWS

Get a permission set assignment

Returns one assignment in full, including the provisioning fields the

Delete a permission set assignment

Revokes an assignment: the principal stops seeing the role through Prism,