| fms:AssociateAdminAccount | Admin |
| fms:DeleteAppsList | Admin |
| fms:DeleteNotificationChannel | Admin |
| fms:DeletePolicy | Admin |
| fms:DeleteProtocolsList | Admin |
| fms:DisassociateAdminAccount | Admin |
| fms:PutAppsList | Admin |
| fms:PutNotificationChannel | Admin |
| fms:PutPolicy | Admin |
| fms:PutProtocolsList | Admin |
| fms:TagResource | Operator |
| fms:UntagResource | Operator |
| fms:GetAdminAccount | Metadata |
| fms:GetAppsList | Metadata |
| fms:GetComplianceDetail | Metadata |
| fms:GetNotificationChannel | Metadata |
| fms:GetPolicy | Metadata |
| fms:GetProtectionStatus | Metadata |
| fms:GetProtocolsList | Metadata |
| fms:GetViolationDetails | Metadata |
| fms:ListAppsLists | Metadata |
| fms:ListComplianceStatus | Metadata |
| fms:ListMemberAccounts | Metadata |
| fms:ListPolicies | Metadata |
| fms:ListProtocolsLists | Metadata |
| fms:ListTagsForResource | Metadata |
