| secretsmanager:CancelRotateSecret | Admin |
| secretsmanager:CreateSecret | Admin |
| secretsmanager:DeleteResourcePolicy | Admin |
| secretsmanager:DeleteSecret | Admin |
| secretsmanager:GetRandomPassword | Admin |
| secretsmanager:GetSecretValue | Admin |
| secretsmanager:ListSecrets | Admin |
| secretsmanager:PutResourcePolicy | Admin |
| secretsmanager:PutSecretValue | Admin |
| secretsmanager:RestoreSecret | Admin |
| secretsmanager:RotateSecret | Admin |
| secretsmanager:UpdateSecret | Admin |
| secretsmanager:UpdateSecretVersionStage | Admin |
| secretsmanager:TagResource | Operator |
| secretsmanager:UntagResource | Operator |
| secretsmanager:DescribeSecret | Metadata |
| secretsmanager:GetResourcePolicy | Metadata |
| secretsmanager:ListSecretVersionIds | Metadata |
