Returns a list of the principal permissions on the resource, filtered by the permissions of the caller¶

Description¶

Returns a list of the principal permissions on the resource, filtered by the permissions of the caller. For example, if you are granted an ALTER permission, you are able to see only the principal permissions for ALTER.

This operation returns only those permissions that have been explicitly granted. If both Principal and Resource parameters are provided, the response returns effective permissions rather than the explicitly granted permissions.

For information about permissions, see Security and Access Control to Metadata and Data.

Usage¶

lakeformation_list_permissions(CatalogId, Principal, ResourceType,
  Resource, NextToken, MaxResults, IncludeRelated)

Arguments¶

CatalogId

The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.
Principal

Specifies a principal to filter the permissions returned.
ResourceType

Specifies a resource type to filter the permissions returned.
Resource

A resource where you will get a list of the principal permissions.

This operation does not support getting privileges on a table with columns. Instead, call this operation on the table, and the operation returns the table and the table w columns.
NextToken

A continuation token, if this is not the first call to retrieve this list.
MaxResults

The maximum number of results to return.
IncludeRelated

Indicates that related permissions should be included in the results when listing permissions on a table resource.

Set the field to TRUE to show the cell filters on a table resource. Default is FALSE. The Principal parameter must not be specified when requesting cell filter information.

Value¶

A list with the following syntax:

list(
  PrincipalResourcePermissions = list(
    list(
      Principal = list(
        DataLakePrincipalIdentifier = "string"
      ),
      Resource = list(
        Catalog = list(
          Id = "string"
        ),
        Database = list(
          CatalogId = "string",
          Name = "string"
        ),
        Table = list(
          CatalogId = "string",
          DatabaseName = "string",
          Name = "string",
          TableWildcard = list()
        ),
        TableWithColumns = list(
          CatalogId = "string",
          DatabaseName = "string",
          Name = "string",
          ColumnNames = list(
            "string"
          ),
          ColumnWildcard = list(
            ExcludedColumnNames = list(
              "string"
            )
          )
        ),
        DataLocation = list(
          CatalogId = "string",
          ResourceArn = "string"
        ),
        DataCellsFilter = list(
          TableCatalogId = "string",
          DatabaseName = "string",
          TableName = "string",
          Name = "string"
        ),
        LFTag = list(
          CatalogId = "string",
          TagKey = "string",
          TagValues = list(
            "string"
          )
        ),
        LFTagPolicy = list(
          CatalogId = "string",
          ResourceType = "DATABASE"|"TABLE",
          Expression = list(
            list(
              TagKey = "string",
              TagValues = list(
                "string"
              )
            )
          ),
          ExpressionName = "string"
        ),
        LFTagExpression = list(
          CatalogId = "string",
          Name = "string"
        )
      ),
      Condition = list(
        Expression = "string"
      ),
      Permissions = list(
        "ALL"|"SELECT"|"ALTER"|"DROP"|"DELETE"|"INSERT"|"DESCRIBE"|"CREATE_DATABASE"|"CREATE_TABLE"|"DATA_LOCATION_ACCESS"|"CREATE_LF_TAG"|"ASSOCIATE"|"GRANT_WITH_LF_TAG_EXPRESSION"|"CREATE_LF_TAG_EXPRESSION"|"CREATE_CATALOG"|"SUPER_USER"
      ),
      PermissionsWithGrantOption = list(
        "ALL"|"SELECT"|"ALTER"|"DROP"|"DELETE"|"INSERT"|"DESCRIBE"|"CREATE_DATABASE"|"CREATE_TABLE"|"DATA_LOCATION_ACCESS"|"CREATE_LF_TAG"|"ASSOCIATE"|"GRANT_WITH_LF_TAG_EXPRESSION"|"CREATE_LF_TAG_EXPRESSION"|"CREATE_CATALOG"|"SUPER_USER"
      ),
      AdditionalDetails = list(
        ResourceShare = list(
          "string"
        )
      ),
      LastUpdated = as.POSIXct(
        "2015-01-01"
      ),
      LastUpdatedBy = "string"
    )
  ),
  NextToken = "string"
)

Request syntax¶

svc$list_permissions(
  CatalogId = "string",
  Principal = list(
    DataLakePrincipalIdentifier = "string"
  ),
  ResourceType = "CATALOG"|"DATABASE"|"TABLE"|"DATA_LOCATION"|"LF_TAG"|"LF_TAG_POLICY"|"LF_TAG_POLICY_DATABASE"|"LF_TAG_POLICY_TABLE"|"LF_NAMED_TAG_EXPRESSION",
  Resource = list(
    Catalog = list(
      Id = "string"
    ),
    Database = list(
      CatalogId = "string",
      Name = "string"
    ),
    Table = list(
      CatalogId = "string",
      DatabaseName = "string",
      Name = "string",
      TableWildcard = list()
    ),
    TableWithColumns = list(
      CatalogId = "string",
      DatabaseName = "string",
      Name = "string",
      ColumnNames = list(
        "string"
      ),
      ColumnWildcard = list(
        ExcludedColumnNames = list(
          "string"
        )
      )
    ),
    DataLocation = list(
      CatalogId = "string",
      ResourceArn = "string"
    ),
    DataCellsFilter = list(
      TableCatalogId = "string",
      DatabaseName = "string",
      TableName = "string",
      Name = "string"
    ),
    LFTag = list(
      CatalogId = "string",
      TagKey = "string",
      TagValues = list(
        "string"
      )
    ),
    LFTagPolicy = list(
      CatalogId = "string",
      ResourceType = "DATABASE"|"TABLE",
      Expression = list(
        list(
          TagKey = "string",
          TagValues = list(
            "string"
          )
        )
      ),
      ExpressionName = "string"
    ),
    LFTagExpression = list(
      CatalogId = "string",
      Name = "string"
    )
  ),
  NextToken = "string",
  MaxResults = 123,
  IncludeRelated = "string"
)