| catalog-admin:* | Admin |
| servicecatalog:AcceptPortfolioShare | Admin |
| servicecatalog:AssociateBudgetWithResource | Admin |
| servicecatalog:AssociatePrincipalWithPortfolio | Admin |
| servicecatalog:AssociateProductWithPortfolio | Admin |
| servicecatalog:AssociateServiceActionWithProvisioningArtifact | Admin |
| servicecatalog:BatchAssociateServiceActionWithProvisioningArtifact | Admin |
| servicecatalog:BatchDisassociateServiceActionFromProvisioningArtifact | Admin |
| servicecatalog:CopyProduct | Admin |
| servicecatalog:CreateConstraint | Admin |
| servicecatalog:CreatePortfolio | Admin |
| servicecatalog:CreatePortfolioShare | Admin |
| servicecatalog:CreateProduct | Admin |
| servicecatalog:CreateProvisionedProductPlan | Admin |
| servicecatalog:CreateProvisioningArtifact | Admin |
| servicecatalog:CreateServiceAction | Admin |
| servicecatalog:DeleteConstraint | Admin |
| servicecatalog:DeletePortfolio | Admin |
| servicecatalog:DeletePortfolioShare | Admin |
| servicecatalog:DeleteProduct | Admin |
| servicecatalog:DeleteProvisionedProductPlan | Admin |
| servicecatalog:DeleteProvisioningArtifact | Admin |
| servicecatalog:DeleteServiceAction | Admin |
| servicecatalog:DisableAWSOrganizationsAccess | Admin |
| servicecatalog:DisassociateBudgetFromResource | Admin |
| servicecatalog:DisassociatePrincipalFromPortfolio | Admin |
| servicecatalog:DisassociateProductFromPortfolio | Admin |
| servicecatalog:DisassociateServiceActionFromProvisioningArtifact | Admin |
| servicecatalog:EnableAWSOrganizationsAccess | Admin |
| servicecatalog:ExecuteProvisionedProductPlan | Admin |
| servicecatalog:ExecuteProvisionedProductServiceAction | Admin |
| servicecatalog:RejectPortfolioShare | Admin |
| servicecatalog:UpdateConstraint | Admin |
| servicecatalog:UpdatePortfolio | Admin |
| servicecatalog:UpdateProduct | Admin |
| servicecatalog:UpdateProvisionedProductProperties | Admin |
| servicecatalog:UpdateProvisioningArtifact | Admin |
| servicecatalog:UpdateServiceAction | Admin |
| servicecatalog:AssociateTagOptionWithResource | Operator |
| servicecatalog:CreateTagOption | Operator |
| servicecatalog:DeleteTagOption | Operator |
| servicecatalog:DisassociateTagOptionFromResource | Operator |
| servicecatalog:ProvisionProduct | Operator |
| servicecatalog:TerminateProvisionedProduct | Operator |
| servicecatalog:UpdateProvisionedProduct | Operator |
| servicecatalog:UpdateTagOption | Operator |
| catalog-user:* | Metadata |
| servicecatalog:DescribeConstraint | Metadata |
| servicecatalog:DescribeCopyProductStatus | Metadata |
| servicecatalog:DescribePortfolio | Metadata |
| servicecatalog:DescribePortfolioShareStatus | Metadata |
| servicecatalog:DescribeProduct | Metadata |
| servicecatalog:DescribeProductAsAdmin | Metadata |
| servicecatalog:DescribeProductView | Metadata |
| servicecatalog:DescribeProvisionedProduct | Metadata |
| servicecatalog:DescribeProvisionedProductPlan | Metadata |
| servicecatalog:DescribeProvisioningArtifact | Metadata |
| servicecatalog:DescribeProvisioningParameters | Metadata |
| servicecatalog:DescribeRecord | Metadata |
| servicecatalog:DescribeServiceAction | Metadata |
| servicecatalog:DescribeServiceActionExecutionParameters | Metadata |
| servicecatalog:DescribeTagOption | Metadata |
| servicecatalog:GetAWSOrganizationsAccessStatus | Metadata |
| servicecatalog:ListAcceptedPortfolioShares | Metadata |
| servicecatalog:ListBudgetsForResource | Metadata |
| servicecatalog:ListConstraintsForPortfolio | Metadata |
| servicecatalog:ListLaunchPaths | Metadata |
| servicecatalog:ListOrganizationPortfolioAccess | Metadata |
| servicecatalog:ListPortfolioAccess | Metadata |
| servicecatalog:ListPortfolios | Metadata |
| servicecatalog:ListPortfoliosForProduct | Metadata |
| servicecatalog:ListPrincipalsForPortfolio | Metadata |
| servicecatalog:ListProvisionedProductPlans | Metadata |
| servicecatalog:ListProvisioningArtifacts | Metadata |
| servicecatalog:ListProvisioningArtifactsForServiceAction | Metadata |
| servicecatalog:ListRecordHistory | Metadata |
| servicecatalog:ListResourcesForTagOption | Metadata |
| servicecatalog:ListServiceActions | Metadata |
| servicecatalog:ListServiceActionsForProvisioningArtifact | Metadata |
| servicecatalog:ListStackInstancesForProvisionedProduct | Metadata |
| servicecatalog:ListTagOptions | Metadata |
| servicecatalog:ScanProvisionedProducts | Metadata |
| servicecatalog:SearchProducts | Metadata |
| servicecatalog:SearchProductsAsAdmin | Metadata |
| servicecatalog:SearchProvisionedProducts | Metadata |
