| databrew:BatchDeleteRecipeVersion | Admin |
| databrew:CreateDataset | Admin |
| databrew:CreateProfileJob | Admin |
| databrew:CreateProject | Admin |
| databrew:CreateRecipe | Admin |
| databrew:CreateRecipeJob | Admin |
| databrew:CreateSchedule | Admin |
| databrew:DeleteDataset | Admin |
| databrew:DeleteJob | Admin |
| databrew:DeleteProject | Admin |
| databrew:DeleteRecipeVersion | Admin |
| databrew:DeleteSchedule | Admin |
| databrew:PublishRecipe | Admin |
| databrew:SendProjectSessionAction | Admin |
| databrew:StartJobRun | Admin |
| databrew:StartProjectSession | Admin |
| databrew:StopJobRun | Admin |
| databrew:UpdateDataset | Admin |
| databrew:UpdateProfileJob | Admin |
| databrew:UpdateProject | Admin |
| databrew:UpdateRecipe | Admin |
| databrew:UpdateRecipeJob | Admin |
| databrew:UpdateSchedule | Admin |
| iam:PassRole | Admin |
| databrew:TagResource | Operator |
| databrew:UntagResource | Operator |
| databrew:DescribeDataset | Metadata |
| databrew:DescribeJob | Metadata |
| databrew:DescribeJobRun | Metadata |
| databrew:DescribeProject | Metadata |
| databrew:DescribeRecipe | Metadata |
| databrew:DescribeSchedule | Metadata |
| databrew:ListDatasets | Metadata |
| databrew:ListJobRuns | Metadata |
| databrew:ListJobs | Metadata |
| databrew:ListProjects | Metadata |
| databrew:ListRecipes | Metadata |
| databrew:ListRecipeVersions | Metadata |
| databrew:ListSchedules | Metadata |
| databrew:ListTagsForResource | Metadata |
| iam:ListRoles | Metadata |
| s3:ListBucket | Metadata |
