| aoss:CreateAccessPolicy | Admin |
| aoss:CreateCollection | Admin |
| aoss:CreateLifecyclePolicy | Admin |
| aoss:CreateSecurityConfig | Admin |
| aoss:CreateSecurityPolicy | Admin |
| aoss:CreateVpcEndpoint | Admin |
| aoss:DeleteAccessPolicy | Admin |
| aoss:DeleteCollection | Admin |
| aoss:DeleteLifecyclePolicy | Admin |
| aoss:DeleteSecurityConfig | Admin |
| aoss:DeleteSecurityPolicy | Admin |
| aoss:DeleteVpcEndpoint | Admin |
| aoss:UpdateAccessPolicy | Admin |
| aoss:UpdateAccountSettings | Admin |
| aoss:UpdateCollection | Admin |
| aoss:UpdateLifecyclePolicy | Admin |
| aoss:UpdateSecurityConfig | Admin |
| aoss:UpdateSecurityPolicy | Admin |
| aoss:UpdateVpcEndpoint | Admin |
| aoss:APIAccessAll | Admin |
| aoss:DashboardsAccessAll | Admin |
| aoss:TagResource | Operator |
| aoss:UntagResource | Operator |
| aoss:BatchGetCollection | Metadata |
| aoss:BatchGetEffectiveLifecyclePolicy | Metadata |
| aoss:BatchGetLifecyclePolicy | Metadata |
| aoss:BatchGetVpcEndpoint | Metadata |
| aoss:GetAccessPolicy | Metadata |
| aoss:GetAccountSettings | Metadata |
| aoss:GetPoliciesStats | Metadata |
| aoss:GetSecurityConfig | Metadata |
| aoss:GetSecurityPolicy | Metadata |
| aoss:ListAccessPolicies | Metadata |
| aoss:ListCollections | Metadata |
| aoss:ListLifecyclePolicies | Metadata |
| aoss:ListSecurityConfigs | Metadata |
| aoss:ListSecurityPolicies | Metadata |
| aoss:ListTagsForResource | Metadata |
| aoss:ListVpcEndpoints | Metadata |
