| iam:PassRole | Admin |
| medialive:BatchUpdateSchedule | Admin |
| medialive:CreateChannel | Admin |
| medialive:CreateInput | Admin |
| medialive:CreateInputSecurityGroup | Admin |
| medialive:DeleteChannel | Admin |
| medialive:DeleteInput | Admin |
| medialive:DeleteInputSecurityGroup | Admin |
| medialive:DeleteReservation | Admin |
| medialive:PurchaseOffering | Admin |
| medialive:UpdateChannel | Admin |
| medialive:UpdateInput | Admin |
| medialive:UpdateInputSecurityGroup | Admin |
| medialive:StartChannel | Operator |
| medialive:StopChannel | Operator |
| iam:GetRolePolicy | Metadata |
| iam:ListRoles | Metadata |
| medialive:DescribeChannel | Metadata |
| medialive:DescribeInput | Metadata |
| medialive:DescribeInputSecurityGroup | Metadata |
| medialive:DescribeOffering | Metadata |
| medialive:DescribeReservation | Metadata |
| medialive:DescribeSchedule | Metadata |
| medialive:ListChannels | Metadata |
| medialive:ListInputSecurityGroups | Metadata |
| medialive:ListInputs | Metadata |
| medialive:ListOfferings | Metadata |
| medialive:ListReservations | Metadata |
