Terjemahan disediakan oleh mesin penerjemah. Jika konten terjemahan yang diberikan bertentangan dengan versi bahasa Inggris aslinya, utamakan versi bahasa Inggris.

# Izin yang diperlukan untuk menggunakan kebijakan IAM khusus untuk mengelola akses ke konsol Amazon Connect
<a name="security-iam-amazon-connect-permissions"></a>

Jika Anda menggunakan kebijakan [IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html) khusus untuk mengelola akses ke konsol Amazon Connect, pengguna Anda memerlukan beberapa atau semua izin yang tercantum dalam artikel ini, tergantung pada tugas yang perlu mereka lakukan. 

**catatan**  
Menggunakan `connect:*` dalam kebijakan IAM khusus memberi pengguna Anda semua izin Amazon Connect yang tercantum dalam artikel ini.

**catatan**  
Halaman tertentu di konsol Amazon Connect, seperti [Tugas](#tasks-page) dan [Profil Pelanggan](#customer-profiles-page), mengharuskan Anda menambahkan izin ke kebijakan sebaris. 

**Topics**
+ [AmazonConnect\_ FullAccess kebijakan](#amazonconnectfullaccesspolicy)
+ [AmazonConnectReadOnlyAccess kebijakan](#amazonconnectreadonlyaccesspolicy)
+ [Halaman beranda](#console-home-page-permissions)
+ [Halaman detail](#detail-pages)
+ [Halaman Ikhtisar](#overview-page)
+ [Halaman telepon](#telephony-page)
+ [Halaman penyimpanan data](#data-storage-page)
+ [Halaman streaming data](#data-streaming-page)
+ [Halaman Arus](#contact-flows-page)
+ [Contact Lenshalaman konektor](#contactlensconnectors-page)
+ [Halaman integrasi transfer suara](#voice-transfer-integrations-page)
+ [Halaman integrasi aplikasi](#application-integration-page)
+ [Halaman Profil Pelanggan](#customer-profiles-page)
+ [Halaman tugas](#tasks-page)
+ [Halaman email](#email-page)
+ [Halaman kasus](#cases-page)
+ [Halaman otentikasi pelanggan](#customer-authentication-page)
+ [Halaman kampanye keluar](#outbound-campaigns-page)
+ [Halaman Connect AI agent](#wisdom-page)
+ [Halaman ID Suara](#voiceid-page)
+ [Halaman peramalan, perencanaan kapasitas, dan penjadwalan](#forecasting-page)
+ [Federasi](#federations)

## AWS kebijakan terkelola: AmazonConnect \_ FullAccess kebijakan
<a name="amazonconnectfullaccesspolicy"></a>

Untuk mengizinkan read/write akses penuh ke Amazon Connect, Anda harus melampirkan dua kebijakan ke pengguna, grup, atau peran Anda. Lampirkan `AmazonConnect_FullAccess` kebijakan dan kebijakan khusus dengan konten berikut:

------
#### [ JSON ]

****  

```
{ 
    "Version":"2012-10-17",		 	 	  
    "Statement": [ 
        { 
            "Sid": "AttachAnyPolicyToAmazonConnectRole", 
            "Effect": "Allow", 
            "Action": "iam:PutRolePolicy", 
            "Resource": "arn:aws:iam::*:role/aws-service-role/connect.amazonaws.com/AWSServiceRoleForAmazonConnect*" 
        } 
    ] 
}
```

------

Untuk memungkinkan pengguna membuat instance, pastikan bahwa mereka memiliki izin yang diberikan oleh `AmazonConnect_FullAccess` kebijakan.

Saat Anda menggunakan `AmazonConnect_FullAccess` kebijakan, perhatikan hal berikut:
+ Hak istimewa tambahan diperlukan untuk membuat bucket Amazon S3 dengan nama pilihan Anda, atau menggunakan bucket yang ada saat membuat atau memperbarui instance dari Connect Customer situs web admin. Jika Anda memilih lokasi penyimpanan default untuk rekaman panggilan, transkrip obrolan, pesan email, lampiran, transkrip panggilan, dan data lainnya, sistem akan ditambahkan ke objek tersebut. `"amazon-connect-"`
+ Kunci `aws/connect` KMS tersedia untuk digunakan sebagai opsi enkripsi default. Untuk menggunakan kunci enkripsi khusus, tetapkan hak istimewa KMS tambahan kepada pengguna.
+ Tetapkan hak istimewa tambahan kepada pengguna untuk melampirkan AWS sumber daya lain seperti Amazon Polly, Streaming Media Langsung, Streaming Data, dan bot Lex ke instans Amazon Connect mereka. 

## AWS kebijakan terkelola: AmazonConnectReadOnlyAccess kebijakan
<a name="amazonconnectreadonlyaccesspolicy"></a>

Untuk mengizinkan akses hanya-baca, Anda hanya perlu melampirkan kebijakan. `AmazonConnectReadOnlyAccess`

## Halaman beranda konsol Amazon Connect
<a name="console-home-page-permissions"></a>

Gambar berikut menunjukkan contoh halaman beranda konsol Amazon Connect, dengan panah menunjuk ke alias instance. Pilih alias instance untuk menavigasi ke halaman instance terperinci.

![Halaman instans pusat kontak virtual Amazon Connect, alias instans.](http://docs.aws.amazon.com/id_id/connect/latest/adminguide/images/instance.png)


Gunakan izin yang tercantum dalam tabel berikut untuk mengelola akses ke halaman ini.


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Daftar contoh | `connect:ListInstances`<br />`ds:DescribeDirectories` | 
| Jelaskan contoh: Lihat detail instance/pengaturan saat ini | `connect:DescribeInstance`<br />`connect:ListLambdaFunctions`<br />`connect:ListLexBots`<br />`connect:ListInstanceStorageConfigs`<br />`connect:ListApprovedOrigins`<br />`connect:ListSecurityKeys`<br />`connect:DescribeInstanceAttributes`<br />`connect:DescribeInstanceStorageConfig`<br />`ds:DescribeDirectories` | 
| Buat contoh | `connect:AssociateCustomerProfilesDomain`<br />`connect:CreateInstance`<br />`connect:DescribeInstance`<br />`connect:ListInstances`<br />`connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceAttribute`<br />`ds:CheckAlias`<br />`ds:CreateAlias`<br />`ds:AuthorizeApplication`<br />`ds:UnauthorizeApplication`<br />`ds:CreateIdentityPoolDirectory`<br />`ds:DescribeDirectories`<br />`iam:CreateServiceLinkedRole`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`logs:CreateLogGroup`<br />`s3:CreateBucket`<br />`s3:GetBucketLocation`<br />`s3:ListAllMyBuckets`<br />`servicequotas:GetServiceQuota`<br />`profile:CreateDomain`<br />`profile:GetDomain`<br />`profile:GetProfileObjectType`<br />`profile:ListAccountIntegrations`<br />`profile:ListDomains`<br />`profile:ListProfileObjectTypeTemplates`<br />`profile:PutIntegration` | 
| Hapus contoh | `connect:DescribeInstance`<br />`connect:DeleteInstance`<br />`connect:ListInstances`<br />`ds:DescribeDirectories`<br />`ds:DeleteDirectory`<br />`ds:UnauthorizeApplication` | 

## Halaman contoh rinci
<a name="detail-pages"></a>

Gambar berikut menunjukkan menu navigasi yang Anda gunakan untuk mengakses setiap halaman contoh rinci.

![Menu navigasi di halaman instans Amazon Connect.](http://docs.aws.amazon.com/id_id/connect/latest/adminguide/images/iam-custom-permissions-admin-console-telephony-page.png)


Untuk mengakses halaman instans terperinci, Anda memerlukan izin ke halaman beranda konsol Amazon Connect (jelaskan/daftar). Atau, gunakan `AmazonConnectReadOnlyAccess` kebijakan.

Tabel berikut mencantumkan izin granular untuk setiap halaman contoh rinci.

**catatan**  
Untuk melakukan `Edit` tindakan, pengguna juga perlu `List` dan `Describe` izin.

## Halaman Ikhtisar
<a name="overview-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Buat peran terkait layanan | `connect:DescribeInstance`<br />`connect:ListInstances`<br />`connect:DescribeInstanceAttribute`<br />`connect:UpdateInstanceAttribute`<br />`connect:ListIntegrationAssociations`<br />`profile:ListAccountIntegrations`<br />`ds:DescribeDirectories`<br />`iam:CreateServiceLinkedRole`<br />`iam:PutRolePolicy` | 

## Halaman telepon
<a name="telephony-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat opsi telepon | `connect:DescribeInstance` | 
| Aktifkan/Nonaktifkan opsi telepon  | `connect:UpdateInstanceAttribute` | 
| Lihat kampanye keluar | `connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`kms:DescribeKey` | 
| Aktifkan/nonaktifkan kampanye keluar | `connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect-campaigns:StartInstanceOnboardingJob`<br />`connect-campaigns:DeleteInstanceOnboardingJob`<br />`connect-campaigns:DeleteConnectInstanceConfig`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`connect:UpdateInstanceAttribute`<br />`iam:CreateServiceLinkedRole`<br />`iam:DeleteServiceLinkedRole`<br />`iam:AttachRolePolicy`<br />`iam:PutRolePolicy`<br />`iam:DeleteRolePolicy`<br />`events:PutRule`<br />`events:PutTargets`<br />`events:DeleteRule`<br />`events:RemoveTargets`<br />`events:DescribeRule`<br />`events:ListTargetsByRule`<br />`ds:DescribeDirectories`<br />`kms:DescribeKey`<br />`kms:ListKeys`<br />`kms:CreateGrant`<br />`kms:RetireGrant` | 

## Halaman penyimpanan data
<a name="data-storage-page"></a>

### Bagian perekaman panggilan
<a name="call-recording-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat rekaman panggilan | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Edit rekaman panggilan | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:GetBucketAcl`<br />`s3:CreateBucket`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Bagian perekaman layar
<a name="screen-recording-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat perekaman layar | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Edit perekaman layar | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:GetBucketAcl`<br />`s3:CreateBucket`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant` | 

### Bagian transkrip obrolan
<a name="chat-transcripts-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat transkrip obrolan | `connect:DescribeInstance`<br />`connect:DescribeInstanceStorageConfig`<br />`connect:ListInstanceStorageConfigs` | 
| Edit transkrip obrolan | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:GetBucketAcl`<br />`s3:CreateBucket`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Bagian lampiran
<a name="attachments-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat lampiran | `connect:DescribeInstance`<br />`connect:DescribeInstanceStorageConfig`<br />`connect:ListInstanceStorageConfigs` | 
| Edit lampiran | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:CreateBucket`<br />`s3:GetBucketAcl`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Bagian streaming media langsung
<a name="live-media-streaming-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat streaming media langsung | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Edit streaming media langsung | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Bagian laporan yang diekspor
<a name="exported-reports-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat laporan yang diekspor | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Edit laporan yang diekspor | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect: DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:CreateBucket`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`kms:CreateGrant`<br />`iam:PutRolePolicy` | 

## Halaman streaming data
<a name="data-streaming-page"></a>

### Bagian catatan kontak
<a name="ctr-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat streaming data - Catatan kontak | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Edit catatan kontak | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`firehose:ListDeliveryStreams`<br />`firehose:DescribeDeliveryStream`<br />`kinesis:ListStreams`<br />`kinesis:DescribeStream`<br />`iam:PutRolePolicy` | 

### Bagian acara agen
<a name="agent-events-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat streaming data - Acara agen | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Edit acara agen | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`kinesis:ListStreams`<br />`kinesis: DescribeStream`<br />`iam:PutRolePolicy` | 

## Halaman Arus
<a name="contact-flows-page"></a>

### Bagian kunci keamanan mengalir
<a name="security-keys-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat kunci keamanan alur | `connect:DescribeInstance`<br />`connect:ListSecurityKeys` | 
| Tambah/hapus kunci keamanan aliran | `connect:AssociateSecurityKey`<br />`connect:DisassociateSecurityKey` | 

### Bagian Lex bot
<a name="lex-bots-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat Lex bots | `connect:ListLexBots`<br />`connect:ListBots` | 
| Tambah/hapus Lex bot | `lex:GetBots`<br />`lex:GetBot`<br />`lex:CreateResourcePolicy`<br />`lex:DeleteResourcePolicy`<br />`lex:UpdateResourcePolicy`<br />`lex:DescribeBotAlias`<br />`lex:ListBotAliases`<br />`lex:ListBots`<br />`connect:AssociateBot`<br />`connect:DisassociateBot`<br />`connect:ListBots`<br />`connect:AssociateLexBot`<br />`connect:DisassociateLexBot`<br />`connect:ListLexBots`<br />`iam:PutRolePolicy` | 

### Bagian fungsi Lambda
<a name="lambda-functions-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat fungsi Lambda | `connect:ListLambdaFunctions` | 
| Tambah/hapus fungsi Lambda | `connect:ListLambdaFunctions`<br />`connect:AssociateLambdaFunction`<br />`connect:DisassociateLambdaFunction`<br />`iam:PutRolePolicy`<br />`lambda:ListFunctions`<br />`lambda:AddPermission`<br />`lambda:RemovePermission` | 

### Bagian log aliran
<a name="contact-flow-logs-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat konfigurasi log alur | `connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute` | 
| Aktifkan/nonaktifkan log aliran | `logs:CreateLogGroup` | 

### Bagian Amazon Polly
<a name="amazon-polly-section"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat opsi Amazon Polly | `connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute` | 
| Perbarui opsi Amazon Polly | `connect:UpdateInstanceAttribute` | 

## Contact Lenshalaman konektor
<a name="contactlensconnectors-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat Contact Lens konektor | `connect:ListIntegrationAssociations`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration` | 
| Add/Update/RemoveContact Lenskonektor | `chime:CreateVoiceConnector`<br />`chime:DeleteVoiceConnector`<br />`chime:DeleteVoiceConnectorTermination`<br />`chime:DeleteVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:PutVoiceConnectorLoggingConfiguration`<br />`chime:PutVoiceConnectorTermination`<br />`chime:PutVoiceConnectorTerminationCredentials`<br />`chime:UpdateVoiceConnector`<br />`chime:CreateConnectAnalyticsConnector`<br />`chime:PutVoiceConnectorExternalSystemsConfiguration`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration`<br />`chime:DeleteVoiceConnectorExternalSystemsConfiguration`<br />`chime:AssociateVoiceConnectorConnect`<br />`chime:DisassociateVoiceConnectorConnect`<br />`chime:TagResources`<br />`chime:UntagResources`<br />`chime:ListTagsForResource` | 

## Halaman integrasi transfer suara
<a name="voice-transfer-integrations-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat konektor transfer suara eksternal | `connect:ListIntegrationAssociations`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration`<br />`servicequotas:GetServiceQuota` | 
| Add/Update/Removekonektor transfer suara eksternal | `connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`chime:CreateConnectCallTransferConnector`<br />`chime:CreateVoiceConnector`<br />`chime:DeleteVoiceConnector`<br />`chime:DeleteVoiceConnectorTermination`<br />`chime:DeleteVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorOrigination`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:PutVoiceConnectorLoggingConfiguration`<br />`chime:PutVoiceConnectorOrigination`<br />`chime:PutVoiceConnectorTermination`<br />`chime:PutVoiceConnectorTerminationCredentials`<br />`chime:UpdateVoiceConnector`<br />`chime:CreateConnectAnalyticsConnector`<br />`chime:PutVoiceConnectorExternalSystemsConfiguration`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration`<br />`chime:DeleteVoiceConnectorExternalSystemsConfiguration`<br />`chime:AssociateVoiceConnectorConnect`<br />`chime:DisassociateVoiceConnectorConnect`<br />`chime:TagResources`<br />`chime:UntagResources`<br />`chime:ListTagsForResource`<br />`servicequotas:GetServiceQuota` | 

## Halaman integrasi aplikasi
<a name="application-integration-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat asal yang disetujui | `connect:DescribeInstance`<br />`connect:ListApprovedOrigins` | 
| Edit asal yang disetujui | `connect: AssociateApprovedOrigin`<br />`connect:ListApprovedOrigins`<br />`connect:DisassociateApprovedOrigin` | 

## Halaman Profil Pelanggan
<a name="customer-profiles-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat profil pelanggan | `app-integrations:ListEventIntegrations`<br />`appflow:DescribeConnectorEntity`<br />`appflow:DescribeConnectorProfiles`<br />`appflow:DescribeFlow`<br />`appflow:ListFlows`<br />`appflow:ListConnectorEntities`<br />`appflow:ListConnectorProfiles`<br />`cloudwatch:GetMetricData`<br />`connect:DescribeInstance`<br />`connect:ListInstances`<br />`ds:DescribeDirectories`<br />`iam:ListRoles`<br />`kinesis:DescribeStreamSummary`<br />`kms:Decrypt`<br />`kms:DescribeKey`<br />`kms:GenerateDataKey`<br />`kms:ListKeys`<br />`profile:GetCalculatedAttributeDefinition`<br />`profile:GetDomain`<br />`profile:GetEventStream`<br />`profile:GetIdentityResolutionJob`<br />`profile:GetIntegration`<br />`profile:GetProfileObjectType`<br />`profile:GetProfileObjectTypeTemplate`<br />`profile:GetWorkflow`<br />`profile:ListAccountIntegrations`<br />`profile:ListCalculatedAttributeDefinitions`<br />`profile:ListDomains`<br />`profile:ListDomainLayouts`<br />`profile:ListEventStreams`<br />`profile:ListIdentityResolutionJobs`<br />`profile:ListIntegrations`<br />`profile:ListProfileObjectTypes`<br />`profile:ListProfileObjectTypeTemplates`<br />`profile:ListRecommenders`<br />`profile:ListSegmentDefinitions`<br />`sqs:ListQueues` | 
| Edit profil pelanggan | `app-integrations:CreateEventIntegration`<br />`app-integrations:ListEventIntegrations`<br />`appflow:CreateFlow`<br />`appflow:CreateConnectorProfile`<br />`appflow:DescribeFlow`<br />`appflow:DeleteFlow`<br />`appflow:DescribeConnectorEntity`<br />`appflow:DescribeConnectorProfiles`<br />`appflow:ListFlows`<br />`appflow:ListConnectorEntities`<br />`appflow:ListConnectorProfiles`<br />`appflow:StartFlow`<br />`cloudwatch:GetMetricData`<br />`connect:DescribeInstance`<br />`connect:ListInstances`<br />`ds:DescribeDirectories`<br />`events:CreateEventBus`<br />`events:DescribeEventBus`<br />`events:DescribeEventSource`<br />`events:ListEventSources`<br />`iam:CreateRole`<br />`iam:CreatePolicy`<br />`iam:AttachRolePolicy`<br />`iam:ListRoles`<br />`iam:PutRolePolicy`<br />`kinesis:DescribeStreamSummary`<br />`kinesis:ListStreams`<br />`kms:CreateGrant`<br />`kms:Decrypt`<br />`kms:DescribeKey`<br />`kms:GenerateDataKey`<br />`kms:ListAliases`<br />`kms:ListKeys`<br />`kms:ListGrants`<br />`profile:CreateCalculatedAttributeDefinition`<br />`profile:CreateDomain`<br />`profile:CreateDomainLayout`<br />`profile:CreateEventStream`<br />`profile:CreateIntegrationWorkflow`<br />`profile:CreateSegmentDefinition`<br />`profile:DeleteEventStream`<br />`profile:DeleteIntegration`<br />`profile:DeleteDomain`<br />`profile:DeleteProfileObjectType`<br />`profile:DetectProfileObjectType`<br />`profile:GetCalculatedAttributeDefinition`<br />`profile:GetDomain`<br />`profile:GetEventStream`<br />`profile:GetIdentityResolutionJob`<br />`profile:GetIntegration`<br />`profile:GetProfileObjectType`<br />`profile:GetProfileObjectTypeTemplate`<br />`profile:GetWorkflow`<br />`profile:ListAccountIntegrations`<br />`profile:ListCalculatedAttributeDefinitions`<br />`profile:ListDomains`<br />`profile:ListDomainLayouts`<br />`profile:ListEventStreams`<br />`profile:ListIdentityResolutionJobs`<br />`profile:ListIntegrations`<br />`profile:ListProfileObjectTypes`<br />`profile:ListProfileObjectTypeTemplates`<br />`profile:ListSegmentDefinitions`<br />`profile:PutIntegration`<br />`profile:PutProfileObjectType`<br />`profile:TagResource`<br />`profile:UntagResource`<br />`profile:UpdateDomain`<br />`s3:GetBucketLocation`<br />`s3:GetBucketPolicy`<br />`s3:GetObject`<br />`s3:HeadBucket`<br />`s3:ListAllMyBuckets`<br />`s3:ListBucket`<br />`s3:ListObjectsV2`<br />`s3:PutBucketPolicy`<br />`s3:SelectObjectContent`<br />`sqs:ListQueues` | 

## Halaman tugas
<a name="tasks-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat Integrasi Tugas | `app-integrations:GetEventIntegration`<br />`connect:ListIntegrationAssociations` | 
| Edit Integrasi Tugas | `app-integrations:CreateEventIntegration`<br />`app-integrations:GetEventIntegration`<br />`app-integrations:ListEventIntegrations`<br />`app-integrations:DeleteEventIntegrationAssociation`<br />`app-integrations:CreateEventIntegrationAssociation`<br />`appflow:CreateFlow`<br />`appflow:CreateConnectorProfile`<br />`appflow:DescribeFlow`<br />`appflow:DeleteFlow`<br />`appflow:DeleteConnectorProfile`<br />`appflow:DescribeConnectorEntity`<br />`appflow:ListFlows`<br />`appflow:ListConnectorEntities`<br />`appflow:StartFlow`<br />`connect:ListIntegrationAssociations`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListUseCases`<br />`connect:DeleteUseCase`<br />`events:ActivateEventSource`<br />`events:CreateEventBus`<br />`events:DescribeEventBus`<br />`events:DescribeEventSource`<br />`events:ListEventSources`<br />`events:ListTargetsByRule`<br />`events:PutRule`<br />`events:PutTargets`<br />`events:DeleteRule`<br />`events:RemoveTargets`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:ListKeys`<br />`kms:ListGrants` | 

## Halaman email
<a name="email-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat domain dan alamat email | `ses:GetIdentityVerificationAttributes`<br />`ses:DescribeReceiptRule`<br />`ses:DescribeActiveReceiptRuleSet`<br />`ses:GetEmailIdentity`<br />`ses:DescribeReceiptRuleSet`<br />`ses:GetConfigurationSetEventDestinations`<br />`ses:GetConfigurationSet` | 
| Edit domain dan alamat email | `ses:CreateReceiptRule`<br />`ses:UpdateReceiptRule`<br />`ses:SetActiveReceiptRuleSet`<br />`ses:CreateReceiptRuleSet`<br />`ses:CreateEmailIdentity`<br />`ses:TagResource`<br />`ses:UntagResource`<br />`ses:DeleteReceiptRule`<br />`ses:DeleteReceiptRuleSet`<br />`ses:CloneReceiptRuleSet`<br />`ses:CreateConfigurationSet`<br />`ses:CreateConfigurationSetEventDestination`<br />`ses:PutEmailIdentityConfigurationSetAttributes`<br />`ses:CreateEmailIdentityPolicy`<br />`ses:UpdateEmailIdentityPolicy`<br />`ses:DeleteEmailIdentityPolicy`<br />`iam:CreateServiceLinkedRole`<br />`iam:PassRole`<br />`iam:CreateRole`<br />`iam:CreatePolicy` | 

## Halaman kasus
<a name="cases-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat detail domain Kasus | `connect:ListInstances`<br />`ds:DescribeDirectories`<br />`connect:ListIntegrationAssociations`<br />`cases:GetDomain` | 
| Onboard ke Kasus | `connect:ListInstances`<br />`connect:ListIntegrationAssociations`<br />`cases:GetDomain`<br />`cases:CreateDomain`<br />`connect:CreateIntegrationAssociation`<br />`connect:DescribeInstance`<br />`iam:PutRolePolicy` | 

## Halaman otentikasi pelanggan
<a name="customer-authentication-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat otentikasi pelanggan | `connect:ListIntegrationAssociations`<br />`cognito-idp:ListUserPools`<br />`cognito-idp:DescribeUserPool` | 
| Onboard ke otentikasi pelanggan | `connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`cognito-idp:ListUserPools`<br />`cognito-idp:DescribeUserPool`<br />`cognito-idp:ListUserPoolClients`<br />`cognito-idp:TagResource`<br />`cognito-idp:CreateUserPool` | 

## Halaman kampanye keluar
<a name="outbound-campaigns-page"></a>


|  Tindakan/Kasus penggunaan  |  Izin diperlukan  | 
| --- | --- | 
|  Lihat kampanye keluar  | `connect:ListIntegrationAssociations`<br />`connect:ListPhoneNumbersV2`<br />`connect:SearchEmailAddresses`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`kms:DescribeKey`<br />`kms:ListKeys`<br />`profile:ListAccountIntegrations`<br />`profile:ListIntegrations`<br />`profile:ListDomains`<br />`profile:GetDomain`<br />`wisdom:ListKnowledgeBases`<br />`wisdom:GetKnowledgeBase`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:ListConnectInstanceIntegrations` | 
|  Buat kampanye keluar  | `connect-campaigns:StartInstanceOnboardingJob`<br />`connect-campaigns:DeleteInstanceOnboardingJob`<br />`connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect-campaigns:DeleteConnectInstanceConfig`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`connect:UpdateInstanceAttribute`<br />`iam:CreateServiceLinkedRole`<br />`iam:DeleteServiceLinkedRole`<br />`iam:AttachRolePolicy`<br />`iam:PutRolePolicy`<br />`iam:DeleteRolePolicy`<br />`events:PutRule`<br />`events:PutTargets`<br />`events:DeleteRule`<br />`events:RemoveTargets`<br />`events:DescribeRule`<br />`events:ListTargetsByRule`<br />`ds:DescribeDirectories`<br />`kms:DescribeKey`<br />`kms:ListKeys`<br />`kms:CreateGrant`<br />`kms:RetireGrant`<br />`profile:CreateDomain`<br />`profile:ListAccountIntegrations`<br />`profile:ListIntegrations`<br />`profile:PutIntegration`<br />`profile:PutProfileObjectType`<br />`connect:CreateIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`connect:UpdateInstanceAttribute`<br />`connect:AssociateCustomerProfilesDomain`<br />`connect-campaigns:ListConnectInstanceIntegrations`<br />`connect-campaigns:PutConnectInstanceIntegration`<br />`wisdom:CreateKnowledgeBase`<br />`wisdom:ListKnowledgeBases` | 

## Halaman Connect AI agent
<a name="wisdom-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat domain dan integrasi | `wisdom:ListAssistantAssociations`<br />`appflow:DescribeConnectorProfiles`<br />`app-integrations:GetDataIntegration`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`connect:ListIntegrationAssociations`<br />`kms:DescribeKey`<br />`kms:ListGrants`<br />`wisdom:GetAssistant`<br />`wisdom:GetKnowledgeBase`<br />`wisdom:ListAssistantAssociations` | 
| Menambah atau menghapus domain | `connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`iam:DeleteRolePolicy`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`wisdom:CreateAssistant`<br />`wisdom:DeleteAssistant`<br />`wisdom:GetAssistant`<br />`wisdom:ListAssistantAssociations`<br />`wisdom:ListAssistants`<br />`wisdom:TagResource` | 
| Menambah atau menghapus integrasi | `wisdom:ListAssistantAssociations`<br />`app-integrations:CreateDataIntegration`<br />`app-integrations:CreateDataIntegrationAssociation`<br />`app-integrations:DeleteDataIntegrationAssociation`<br />`app-integrations:GetDataIntegration`<br />`app-integrations:ListDataIntegrations`<br />`appflow:CreateConnectorProfile`<br />`appflow:CreateFlow`<br />`appflow:DeleteFlow`<br />`appflow:DescribeConnector`<br />`appflow:DescribeConnectorEntity`<br />`appflow:DescribeConnectorProfiles`<br />`appflow:DescribeConnectors`<br />`appflow:DescribeFlow`<br />`appflow:ListConnectorEntities`<br />`appflow:StartFlow`<br />`appflow:StopFlow`<br />`appflow:TagResource`<br />`appflow:UseConnectorProfile`<br />`connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`iam:DeleteRolePolicy`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:Decrypt`<br />`kms:DescribeKey`<br />`kms:GenerateDataKey`<br />`kms:ListAliases`<br />`kms:ListGrants`<br />`secretsmanager:CreateSecret`<br />`secretsmanager:PutResourcePolicy`<br />`wisdom:CreateAssistantAssociation`<br />`wisdom:CreateKnowledgeBase`<br />`wisdom:DeleteAssistantAssociation`<br />`wisdom:DeleteKnowledgeBase`<br />`wisdom:GetAssistant`<br />`wisdom:GetKnowledgeBase`<br />`wisdom:ListAssistantAssociations`<br />`wisdom:ListKnowledgeBases`<br />`wisdom:TagResource` | 

## Halaman ID Suara
<a name="voiceid-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat integrasi ID Suara | `voiceid:DescribeDomain`<br />`voiceid:ListDomains`<br />`voiceid:RegisterComplianceConsent`<br />`voiceid:DescribeComplianceConsent`<br />`connect:ListIntegrationAssociations` | 
| Edit integrasi ID Suara | `voiceid:DescribeDomain`<br />`voiceid:ListDomains`<br />`voiceid:RegisterComplianceConsent`<br />`voiceid:DescribeComplianceConsent`<br />`voiceid:UpdateDomain`<br />`voiceid:CreateDomain`<br />`connect:ListIntegrationAssociations`<br />`connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`events:PutRule`<br />`events:DeleteRule`<br />`events:PutTargets`<br />`events:RemoveTargets`<br />`iam:PutRolePolicy` | 

## Halaman peramalan, perencanaan kapasitas, dan penjadwalan
<a name="forecasting-page"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Lihat peramalan, perencanaan kapasitas, dan penjadwalan | `connect:DescribeForecastingPlanningSchedulingIntegration` | 
| Aktifkan peramalan, perencanaan kapasitas, dan penjadwalan | `connect:UpdateInstanceAttribute`<br />`connect:StartForecastingPlanningSchedulingIntegration` | 
| Nonaktifkan peramalan, perencanaan kapasitas, dan penjadwalan | `connect:UpdateInstanceAttribute`<br />`connect:StopForecastingPlanningSchedulingIntegration` | 

## Federasi
<a name="federations"></a>

### Federasi SAFL
<a name="saml-federation"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Federasi SAFL | `connect:GetFederationToken` | 

### Admin/Federasi Darurat
<a name="admin-emergency-federation"></a>


| Kasus tindakan/penggunaan | Izin diperlukan | 
| --- | --- | 
| Admin/Federasi Darurat | `connect:AdminGetEmergencyAccessToken` |