Modify a role/policy in the Remediation dashboard
This article describes how you can use the Remediation dashboard in Permissions Management to modify roles/policies for the Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP) authorization systems.
To view the Remediation tab, you must have Viewer, Controller, or Administrator permissions. To make changes on this tab, you must have Controller or Administrator permissions. If you don't have these permissions, contact your system administrator.
Microsoft Azure uses the term role for what other cloud providers call policy. Permissions Management automatically makes this terminology change when you select the authorization system type. In the user documentation, we use role/policy to refer to both.
Modify a role/policy
On the Permissions Management home page, select the Remediation tab, and then select the Role/Policies tab.
Select the role/policy you want to modify, and from the Actions column, select Modify.
You can't modify System policies and roles.
On the Statements page, make your changes to the Tasks, Resources, Request conditions, and Effect sections as required, and then select Next.
Review the changes to the JSON or script on the Preview page, and then select Submit.
- For information on how to view existing roles/policies, requests, and permissions, see View roles/policies, requests, and permission in the Remediation dashboard.
- For information on how to create a role/policy, see Create a role/policy.
- For information on how to clone a role/policy, see Clone a role/policy.
- For information on how to delete a role/policy, see Delete a role/policy.
- To view information about roles/policies, see View information about roles/policies.
- For information on how to attach and detach permissions for AWS identities, see Attach and detach policies for AWS identities.
- For information on how to revoke high-risk and unused tasks or assign read-only status for Azure and GCP identities, see Revoke high-risk and unused tasks or assign read-only status for Azure and GCP identities
- For information on how to create or approve a request for permissions, see Create or approve a request for permissions.
- For information on how to view information about roles/policies, see View information about roles/policies