Las traducciones son generadas a través de traducción automática. En caso de conflicto entre la traducción y la version original de inglés, prevalecerá la version en inglés.

# Permisos necesarios para usar políticas de IAM personalizadas para administrar el acceso a la consola Connect Customer
<a name="security-iam-amazon-connect-permissions"></a>

Si utiliza políticas de [IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html) personalizadas para administrar el acceso a la consola Connect Customer, sus usuarios necesitan algunos o todos los permisos que se enumeran en este artículo, en función de las tareas que deban realizar. 

**nota**  
El uso `connect:*` de una política de IAM personalizada otorga a los usuarios todos los permisos de Connect Customer que se enumeran en este artículo.

**nota**  
Algunas páginas de la consola Connect Customer, como [las tareas](#tasks-page) y [los perfiles de los clientes](#customer-profiles-page), requieren que añada permisos a sus políticas integradas. 

**Topics**
+ [AmazonConnect\_ FullAccess política](#amazonconnectfullaccesspolicy)
+ [AmazonConnectReadOnlyAccess política](#amazonconnectreadonlyaccesspolicy)
+ [Página de inicio](#console-home-page-permissions)
+ [Páginas de detalles](#detail-pages)
+ [Página de información general](#overview-page)
+ [Página de telefonía](#telephony-page)
+ [Página de almacenamiento de datos](#data-storage-page)
+ [Página de streaming de datos](#data-streaming-page)
+ [Página de flujos](#contact-flows-page)
+ [Página de conectores de Contact Lens](#contactlensconnectors-page)
+ [Página de integraciones de transferencia de voz](#voice-transfer-integrations-page)
+ [Página de integración de aplicaciones](#application-integration-page)
+ [Página de Perfiles de clientes](#customer-profiles-page)
+ [Página Tareas](#tasks-page)
+ [Página de correo electrónico](#email-page)
+ [Página Cases](#cases-page)
+ [Página de autenticación del cliente](#customer-authentication-page)
+ [Página de campañas externas](#outbound-campaigns-page)
+ [Página Connect AI agents](#wisdom-page)
+ [Página de Voice ID](#voiceid-page)
+ [Página de previsión, planificación de capacidad y programación](#forecasting-page)
+ [Federaciones](#federations)

## AWS política gestionada: AmazonConnect \_ FullAccess política
<a name="amazonconnectfullaccesspolicy"></a>

Para permitir el read/write acceso total a Connect Customer, debe adjuntar dos políticas a sus usuarios, grupos o funciones. Asocie la política `AmazonConnect_FullAccess` y una política personalizada al siguiente contenido:

------
#### [ JSON ]

****  

```
{ 
    "Version":"2012-10-17",		 	 	  
    "Statement": [ 
        { 
            "Sid": "AttachAnyPolicyToAmazonConnectRole", 
            "Effect": "Allow", 
            "Action": "iam:PutRolePolicy", 
            "Resource": "arn:aws:iam::*:role/aws-service-role/connect.amazonaws.com/AWSServiceRoleForAmazonConnect*" 
        } 
    ] 
}
```

------

Para permitir que un usuario de IAM cree una instancia, asegúrese de que dispone de los permisos concedidos por la política `AmazonConnect_FullAccess`.

Cuando utilice la política `AmazonConnect_FullAccess`, tenga en cuenta lo siguiente:
+ Se requieren privilegios adicionales para crear un bucket de Amazon S3 con el nombre que elija o para usar un bucket existente al crear o actualizar una instancia desde el sitio web de Connect Customer administración. Si elige ubicaciones de almacenamiento predeterminadas para sus grabaciones de llamadas, transcripciones de chat, mensajes de correo electrónico, adjuntos, transcripciones de llamadas y otros datos, el sistema antepone `"amazon-connect-"` a esos objetos.
+ La clave de KMS `aws/connect` está disponible para utilizarla como opción de cifrado predeterminada. Para utilizar una clave de cifrado personalizada, asigne a los usuarios privilegios de KMS adicionales.
+ Asigne a los usuarios privilegios adicionales para adjuntar otros AWS recursos como Amazon Polly, Live Media Streaming, Data Streaming y Lex bots a sus instancias de Connect Customer. 

## AWS política gestionada: AmazonConnectReadOnlyAccess política
<a name="amazonconnectreadonlyaccesspolicy"></a>

Para permitir el acceso de solo lectura, únicamente debe asociar la política `AmazonConnectReadOnlyAccess`.

## Página de inicio de la consola Connect Customer
<a name="console-home-page-permissions"></a>

En la siguiente imagen se muestra un ejemplo de la página de inicio de la consola Connect Customer, con una flecha que apunta al alias de la instancia. Elige el alias de la instancia para acceder a las páginas detalladas de la instancia.

![La página de instancias del centro de contacto virtual Connect Customer, el alias de la instancia.](http://docs.aws.amazon.com/es_es/connect/latest/adminguide/images/instance.png)


Utilice los permisos que se enumeran en la siguiente tabla para administrar el acceso a esta página.


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Enumerar instancia | `connect:ListInstances`<br />`ds:DescribeDirectories` | 
| Describir instancia: ver los detalles de la instancia o configuración actual | `connect:DescribeInstance`<br />`connect:ListLambdaFunctions`<br />`connect:ListLexBots`<br />`connect:ListInstanceStorageConfigs`<br />`connect:ListApprovedOrigins`<br />`connect:ListSecurityKeys`<br />`connect:DescribeInstanceAttributes`<br />`connect:DescribeInstanceStorageConfig`<br />`ds:DescribeDirectories` | 
| Crear instancia | `connect:AssociateCustomerProfilesDomain`<br />`connect:CreateInstance`<br />`connect:DescribeInstance`<br />`connect:ListInstances`<br />`connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceAttribute`<br />`ds:CheckAlias`<br />`ds:CreateAlias`<br />`ds:AuthorizeApplication`<br />`ds:UnauthorizeApplication`<br />`ds:CreateIdentityPoolDirectory`<br />`ds:DescribeDirectories`<br />`iam:CreateServiceLinkedRole`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`logs:CreateLogGroup`<br />`s3:CreateBucket`<br />`s3:GetBucketLocation`<br />`s3:ListAllMyBuckets`<br />`servicequotas:GetServiceQuota`<br />`profile:CreateDomain`<br />`profile:GetDomain`<br />`profile:GetProfileObjectType`<br />`profile:ListAccountIntegrations`<br />`profile:ListDomains`<br />`profile:ListProfileObjectTypeTemplates`<br />`profile:PutIntegration` | 
| Eliminar instancia | `connect:DescribeInstance`<br />`connect:DeleteInstance`<br />`connect:ListInstances`<br />`ds:DescribeDirectories`<br />`ds:DeleteDirectory`<br />`ds:UnauthorizeApplication` | 

## Páginas de instancias detalladas
<a name="detail-pages"></a>

En la siguiente imagen se muestra el menú de navegación que utiliza para acceder a cada una de las páginas de instancias detalladas.

![El menú de navegación de la página Connect Customer instances.](http://docs.aws.amazon.com/es_es/connect/latest/adminguide/images/iam-custom-permissions-admin-console-telephony-page.png)


Para acceder a las páginas detalladas de las instancias, necesita permisos para acceder a la página de inicio de la consola Connect Customer (describe/list). O utilice la política `AmazonConnectReadOnlyAccess`.

En las siguientes tablas se enumeran los permisos detallados para cada página de instancia.

**nota**  
Para realizar acciones `Edit`, los usuarios también necesitan los permisos `List` y `Describe`.

## Página de información general
<a name="overview-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Crear rol vinculado al servicio | `connect:DescribeInstance`<br />`connect:ListInstances`<br />`connect:DescribeInstanceAttribute`<br />`connect:UpdateInstanceAttribute`<br />`connect:ListIntegrationAssociations`<br />`profile:ListAccountIntegrations`<br />`ds:DescribeDirectories`<br />`iam:CreateServiceLinkedRole`<br />`iam:PutRolePolicy` | 

## Página de telefonía
<a name="telephony-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver opciones de telefonía | `connect:DescribeInstance` | 
| Enable/Disable opciones de telefonía  | `connect:UpdateInstanceAttribute` | 
| Ver campañas externas | `connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`kms:DescribeKey` | 
| Enable/disable campañas salientes | `connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect-campaigns:StartInstanceOnboardingJob`<br />`connect-campaigns:DeleteInstanceOnboardingJob`<br />`connect-campaigns:DeleteConnectInstanceConfig`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`connect:UpdateInstanceAttribute`<br />`iam:CreateServiceLinkedRole`<br />`iam:DeleteServiceLinkedRole`<br />`iam:AttachRolePolicy`<br />`iam:PutRolePolicy`<br />`iam:DeleteRolePolicy`<br />`events:PutRule`<br />`events:PutTargets`<br />`events:DeleteRule`<br />`events:RemoveTargets`<br />`events:DescribeRule`<br />`events:ListTargetsByRule`<br />`ds:DescribeDirectories`<br />`kms:DescribeKey`<br />`kms:ListKeys`<br />`kms:CreateGrant`<br />`kms:RetireGrant` | 

## Página de almacenamiento de datos
<a name="data-storage-page"></a>

### Sección de grabación de llamadas
<a name="call-recording-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver grabación de llamada | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Editar grabación de llamada | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:GetBucketAcl`<br />`s3:CreateBucket`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Sección de grabación de pantalla
<a name="screen-recording-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver grabación de pantalla | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Editar grabación de pantalla | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:GetBucketAcl`<br />`s3:CreateBucket`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant` | 

### Sección de transcripciones de chat
<a name="chat-transcripts-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver transcripciones de chat | `connect:DescribeInstance`<br />`connect:DescribeInstanceStorageConfig`<br />`connect:ListInstanceStorageConfigs` | 
| Editar transcripciones de chat | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:GetBucketAcl`<br />`s3:CreateBucket`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Sección de archivos adjuntos
<a name="attachments-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver archivos adjuntos | `connect:DescribeInstance`<br />`connect:DescribeInstanceStorageConfig`<br />`connect:ListInstanceStorageConfigs` | 
| Editar archivos adjuntos | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:CreateBucket`<br />`s3:GetBucketAcl`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Sección de streaming de medios en directo
<a name="live-media-streaming-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver streaming de medios en directo | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Editar streaming multimedia en directo | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:RetireGrant`<br />`iam:PutRolePolicy` | 

### Sección de informes exportados
<a name="exported-reports-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver informes exportados | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Editar informes exportados | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect: DisassociateInstanceStorageConfig`<br />`s3:ListAllMyBuckets`<br />`s3:GetBucketLocation`<br />`s3:CreateBucket`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:RetireGrant`<br />`kms:CreateGrant`<br />`iam:PutRolePolicy` | 

## Página de streaming de datos
<a name="data-streaming-page"></a>

### Sección de registros de contacto
<a name="ctr-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver streaming de datos: registros de contacto | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Editar registro de contacto | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`firehose:ListDeliveryStreams`<br />`firehose:DescribeDeliveryStream`<br />`kinesis:ListStreams`<br />`kinesis:DescribeStream`<br />`iam:PutRolePolicy` | 

### Sección de eventos de agente
<a name="agent-events-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver streaming de datos: eventos de agente | `connect:DescribeInstance`<br />`connect:ListInstanceStorageConfigs`<br />`connect:DescribeInstanceStorageConfig` | 
| Editar eventos de agente | `connect:AssociateInstanceStorageConfig`<br />`connect:UpdateInstanceStorageConfig`<br />`connect:DisassociateInstanceStorageConfig`<br />`kinesis:ListStreams`<br />`kinesis: DescribeStream`<br />`iam:PutRolePolicy` | 

## Página de flujos
<a name="contact-flows-page"></a>

### Sección de claves de seguridad de flujos
<a name="security-keys-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver claves de seguridad de flujo | `connect:DescribeInstance`<br />`connect:ListSecurityKeys` | 
| Add/remove claves de seguridad de flujo | `connect:AssociateSecurityKey`<br />`connect:DisassociateSecurityKey` | 

### Sección de bots de Lex
<a name="lex-bots-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver bots de Lex | `connect:ListLexBots`<br />`connect:ListBots` | 
| Add/remove Bots Lex | `lex:GetBots`<br />`lex:GetBot`<br />`lex:CreateResourcePolicy`<br />`lex:DeleteResourcePolicy`<br />`lex:UpdateResourcePolicy`<br />`lex:DescribeBotAlias`<br />`lex:ListBotAliases`<br />`lex:ListBots`<br />`connect:AssociateBot`<br />`connect:DisassociateBot`<br />`connect:ListBots`<br />`connect:AssociateLexBot`<br />`connect:DisassociateLexBot`<br />`connect:ListLexBots`<br />`iam:PutRolePolicy` | 

### Sección de funciones de Lambda
<a name="lambda-functions-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver funciones de Lambda | `connect:ListLambdaFunctions` | 
| Add/remove Funciones Lambda | `connect:ListLambdaFunctions`<br />`connect:AssociateLambdaFunction`<br />`connect:DisassociateLambdaFunction`<br />`iam:PutRolePolicy`<br />`lambda:ListFunctions`<br />`lambda:AddPermission`<br />`lambda:RemovePermission` | 

### Sección de registros de flujo
<a name="contact-flow-logs-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver configuración de registro de flujo | `connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute` | 
| Enable/disable registro de flujo | `logs:CreateLogGroup` | 

### Sección de Amazon Polly
<a name="amazon-polly-section"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Opción Ver Amazon Polly | `connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute` | 
| Opción Actualizar Amazon Polly | `connect:UpdateInstanceAttribute` | 

## Contact Lens página de conectores
<a name="contactlensconnectors-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver conectores de Contact Lens | `connect:ListIntegrationAssociations`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration` | 
| Conectores Add/Update/Remove Contact Lens | `chime:CreateVoiceConnector`<br />`chime:DeleteVoiceConnector`<br />`chime:DeleteVoiceConnectorTermination`<br />`chime:DeleteVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:PutVoiceConnectorLoggingConfiguration`<br />`chime:PutVoiceConnectorTermination`<br />`chime:PutVoiceConnectorTerminationCredentials`<br />`chime:UpdateVoiceConnector`<br />`chime:CreateConnectAnalyticsConnector`<br />`chime:PutVoiceConnectorExternalSystemsConfiguration`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration`<br />`chime:DeleteVoiceConnectorExternalSystemsConfiguration`<br />`chime:AssociateVoiceConnectorConnect`<br />`chime:DisassociateVoiceConnectorConnect`<br />`chime:TagResources`<br />`chime:UntagResources`<br />`chime:ListTagsForResource` | 

## Página de integraciones de transferencia de voz
<a name="voice-transfer-integrations-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Visualizar conectores de transferencia de voz externos | `connect:ListIntegrationAssociations`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration`<br />`servicequotas:GetServiceQuota` | 
| Add/Update/Remove conectores de transferencia de voz externos | `connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`chime:CreateConnectCallTransferConnector`<br />`chime:CreateVoiceConnector`<br />`chime:DeleteVoiceConnector`<br />`chime:DeleteVoiceConnectorTermination`<br />`chime:DeleteVoiceConnectorTerminationCredentials`<br />`chime:GetVoiceConnector`<br />`chime:GetVoiceConnectorLoggingConfiguration`<br />`chime:GetVoiceConnectorOrigination`<br />`chime:GetVoiceConnectorTermination`<br />`chime:GetVoiceConnectorTerminationHealth`<br />`chime:ListVoiceConnectors`<br />`chime:ListVoiceConnectorTerminationCredentials`<br />`chime:PutVoiceConnectorLoggingConfiguration`<br />`chime:PutVoiceConnectorOrigination`<br />`chime:PutVoiceConnectorTermination`<br />`chime:PutVoiceConnectorTerminationCredentials`<br />`chime:UpdateVoiceConnector`<br />`chime:CreateConnectAnalyticsConnector`<br />`chime:PutVoiceConnectorExternalSystemsConfiguration`<br />`chime:GetVoiceConnectorExternalSystemsConfiguration`<br />`chime:DeleteVoiceConnectorExternalSystemsConfiguration`<br />`chime:AssociateVoiceConnectorConnect`<br />`chime:DisassociateVoiceConnectorConnect`<br />`chime:TagResources`<br />`chime:UntagResources`<br />`chime:ListTagsForResource`<br />`servicequotas:GetServiceQuota` | 

## Página de integración de aplicaciones
<a name="application-integration-page"></a>


| Action/Use funda | Permisos necesarios | 
| --- | --- | 
| Ver los orígenes aprobados | `connect:DescribeInstance`<br />`connect:ListApprovedOrigins` | 
| Editar los orígenes aprobados | `connect: AssociateApprovedOrigin`<br />`connect:ListApprovedOrigins`<br />`connect:DisassociateApprovedOrigin` | 

## Página de Perfiles de clientes
<a name="customer-profiles-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver los perfiles de clientes | `app-integrations:ListEventIntegrations`<br />`appflow:DescribeConnectorEntity`<br />`appflow:DescribeConnectorProfiles`<br />`appflow:DescribeFlow`<br />`appflow:ListFlows`<br />`appflow:ListConnectorEntities`<br />`appflow:ListConnectorProfiles`<br />`cloudwatch:GetMetricData`<br />`connect:DescribeInstance`<br />`connect:ListInstances`<br />`ds:DescribeDirectories`<br />`iam:ListRoles`<br />`kinesis:DescribeStreamSummary`<br />`kms:Decrypt`<br />`kms:DescribeKey`<br />`kms:GenerateDataKey`<br />`kms:ListKeys`<br />`profile:GetCalculatedAttributeDefinition`<br />`profile:GetDomain`<br />`profile:GetEventStream`<br />`profile:GetIdentityResolutionJob`<br />`profile:GetIntegration`<br />`profile:GetProfileObjectType`<br />`profile:GetProfileObjectTypeTemplate`<br />`profile:GetWorkflow`<br />`profile:ListAccountIntegrations`<br />`profile:ListCalculatedAttributeDefinitions`<br />`profile:ListDomains`<br />`profile:ListDomainLayouts`<br />`profile:ListEventStreams`<br />`profile:ListIdentityResolutionJobs`<br />`profile:ListIntegrations`<br />`profile:ListProfileObjectTypes`<br />`profile:ListProfileObjectTypeTemplates`<br />`profile:ListRecommenders`<br />`profile:ListSegmentDefinitions`<br />`sqs:ListQueues` | 
| Editar perfiles de clientes | `app-integrations:CreateEventIntegration`<br />`app-integrations:ListEventIntegrations`<br />`appflow:CreateFlow`<br />`appflow:CreateConnectorProfile`<br />`appflow:DescribeFlow`<br />`appflow:DeleteFlow`<br />`appflow:DescribeConnectorEntity`<br />`appflow:DescribeConnectorProfiles`<br />`appflow:ListFlows`<br />`appflow:ListConnectorEntities`<br />`appflow:ListConnectorProfiles`<br />`appflow:StartFlow`<br />`cloudwatch:GetMetricData`<br />`connect:DescribeInstance`<br />`connect:ListInstances`<br />`ds:DescribeDirectories`<br />`events:CreateEventBus`<br />`events:DescribeEventBus`<br />`events:DescribeEventSource`<br />`events:ListEventSources`<br />`iam:CreateRole`<br />`iam:CreatePolicy`<br />`iam:AttachRolePolicy`<br />`iam:ListRoles`<br />`iam:PutRolePolicy`<br />`kinesis:DescribeStreamSummary`<br />`kinesis:ListStreams`<br />`kms:CreateGrant`<br />`kms:Decrypt`<br />`kms:DescribeKey`<br />`kms:GenerateDataKey`<br />`kms:ListAliases`<br />`kms:ListKeys`<br />`kms:ListGrants`<br />`profile:CreateCalculatedAttributeDefinition`<br />`profile:CreateDomain`<br />`profile:CreateDomainLayout`<br />`profile:CreateEventStream`<br />`profile:CreateIntegrationWorkflow`<br />`profile:CreateSegmentDefinition`<br />`profile:DeleteEventStream`<br />`profile:DeleteIntegration`<br />`profile:DeleteDomain`<br />`profile:DeleteProfileObjectType`<br />`profile:DetectProfileObjectType`<br />`profile:GetCalculatedAttributeDefinition`<br />`profile:GetDomain`<br />`profile:GetEventStream`<br />`profile:GetIdentityResolutionJob`<br />`profile:GetIntegration`<br />`profile:GetProfileObjectType`<br />`profile:GetProfileObjectTypeTemplate`<br />`profile:GetWorkflow`<br />`profile:ListAccountIntegrations`<br />`profile:ListCalculatedAttributeDefinitions`<br />`profile:ListDomains`<br />`profile:ListDomainLayouts`<br />`profile:ListEventStreams`<br />`profile:ListIdentityResolutionJobs`<br />`profile:ListIntegrations`<br />`profile:ListProfileObjectTypes`<br />`profile:ListProfileObjectTypeTemplates`<br />`profile:ListSegmentDefinitions`<br />`profile:PutIntegration`<br />`profile:PutProfileObjectType`<br />`profile:TagResource`<br />`profile:UntagResource`<br />`profile:UpdateDomain`<br />`s3:GetBucketLocation`<br />`s3:GetBucketPolicy`<br />`s3:GetObject`<br />`s3:HeadBucket`<br />`s3:ListAllMyBuckets`<br />`s3:ListBucket`<br />`s3:ListObjectsV2`<br />`s3:PutBucketPolicy`<br />`s3:SelectObjectContent`<br />`sqs:ListQueues` | 

## Página Tareas
<a name="tasks-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver las integraciones de tareas | `app-integrations:GetEventIntegration`<br />`connect:ListIntegrationAssociations` | 
| Editar las integraciones de tareas | `app-integrations:CreateEventIntegration`<br />`app-integrations:GetEventIntegration`<br />`app-integrations:ListEventIntegrations`<br />`app-integrations:DeleteEventIntegrationAssociation`<br />`app-integrations:CreateEventIntegrationAssociation`<br />`appflow:CreateFlow`<br />`appflow:CreateConnectorProfile`<br />`appflow:DescribeFlow`<br />`appflow:DeleteFlow`<br />`appflow:DeleteConnectorProfile`<br />`appflow:DescribeConnectorEntity`<br />`appflow:ListFlows`<br />`appflow:ListConnectorEntities`<br />`appflow:StartFlow`<br />`connect:ListIntegrationAssociations`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListUseCases`<br />`connect:DeleteUseCase`<br />`events:ActivateEventSource`<br />`events:CreateEventBus`<br />`events:DescribeEventBus`<br />`events:DescribeEventSource`<br />`events:ListEventSources`<br />`events:ListTargetsByRule`<br />`events:PutRule`<br />`events:PutTargets`<br />`events:DeleteRule`<br />`events:RemoveTargets`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`kms:ListKeys`<br />`kms:ListGrants` | 

## Página de correo electrónico
<a name="email-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver dominios y direcciones de correo electrónico | `ses:GetIdentityVerificationAttributes`<br />`ses:DescribeReceiptRule`<br />`ses:DescribeActiveReceiptRuleSet`<br />`ses:GetEmailIdentity`<br />`ses:DescribeReceiptRuleSet`<br />`ses:GetConfigurationSetEventDestinations`<br />`ses:GetConfigurationSet` | 
| Editar dominios y direcciones de correo electrónico | `ses:CreateReceiptRule`<br />`ses:UpdateReceiptRule`<br />`ses:SetActiveReceiptRuleSet`<br />`ses:CreateReceiptRuleSet`<br />`ses:CreateEmailIdentity`<br />`ses:TagResource`<br />`ses:UntagResource`<br />`ses:DeleteReceiptRule`<br />`ses:DeleteReceiptRuleSet`<br />`ses:CloneReceiptRuleSet`<br />`ses:CreateConfigurationSet`<br />`ses:CreateConfigurationSetEventDestination`<br />`ses:PutEmailIdentityConfigurationSetAttributes`<br />`ses:CreateEmailIdentityPolicy`<br />`ses:UpdateEmailIdentityPolicy`<br />`ses:DeleteEmailIdentityPolicy`<br />`iam:CreateServiceLinkedRole`<br />`iam:PassRole`<br />`iam:CreateRole`<br />`iam:CreatePolicy` | 

## Página Cases
<a name="cases-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Consulta de los detalles de dominio de Cases | `connect:ListInstances`<br />`ds:DescribeDirectories`<br />`connect:ListIntegrationAssociations`<br />`cases:GetDomain` | 
| Incorporación a Cases | `connect:ListInstances`<br />`connect:ListIntegrationAssociations`<br />`cases:GetDomain`<br />`cases:CreateDomain`<br />`connect:CreateIntegrationAssociation`<br />`connect:DescribeInstance`<br />`iam:PutRolePolicy` | 

## Página de autenticación del cliente
<a name="customer-authentication-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Visualizar autenticación del cliente | `connect:ListIntegrationAssociations`<br />`cognito-idp:ListUserPools`<br />`cognito-idp:DescribeUserPool` | 
| Incorporar a la autenticación del cliente | `connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`cognito-idp:ListUserPools`<br />`cognito-idp:DescribeUserPool`<br />`cognito-idp:ListUserPoolClients`<br />`cognito-idp:TagResource`<br />`cognito-idp:CreateUserPool` | 

## Página de campañas externas
<a name="outbound-campaigns-page"></a>


|  Acción o caso de uso  |  Permisos necesarios  | 
| --- | --- | 
|  Ver campañas externas  | `connect:ListIntegrationAssociations`<br />`connect:ListPhoneNumbersV2`<br />`connect:SearchEmailAddresses`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`kms:DescribeKey`<br />`kms:ListKeys`<br />`profile:ListAccountIntegrations`<br />`profile:ListIntegrations`<br />`profile:ListDomains`<br />`profile:GetDomain`<br />`wisdom:ListKnowledgeBases`<br />`wisdom:GetKnowledgeBase`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:ListConnectInstanceIntegrations` | 
|  Crear campañas externas  | `connect-campaigns:StartInstanceOnboardingJob`<br />`connect-campaigns:DeleteInstanceOnboardingJob`<br />`connect-campaigns:GetConnectInstanceConfig`<br />`connect-campaigns:GetInstanceOnboardingJobStatus`<br />`connect-campaigns:DeleteConnectInstanceConfig`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`connect:UpdateInstanceAttribute`<br />`iam:CreateServiceLinkedRole`<br />`iam:DeleteServiceLinkedRole`<br />`iam:AttachRolePolicy`<br />`iam:PutRolePolicy`<br />`iam:DeleteRolePolicy`<br />`events:PutRule`<br />`events:PutTargets`<br />`events:DeleteRule`<br />`events:RemoveTargets`<br />`events:DescribeRule`<br />`events:ListTargetsByRule`<br />`ds:DescribeDirectories`<br />`kms:DescribeKey`<br />`kms:ListKeys`<br />`kms:CreateGrant`<br />`kms:RetireGrant`<br />`profile:CreateDomain`<br />`profile:ListAccountIntegrations`<br />`profile:ListIntegrations`<br />`profile:PutIntegration`<br />`profile:PutProfileObjectType`<br />`connect:CreateIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`connect:UpdateInstanceAttribute`<br />`connect:AssociateCustomerProfilesDomain`<br />`connect-campaigns:ListConnectInstanceIntegrations`<br />`connect-campaigns:PutConnectInstanceIntegration`<br />`wisdom:CreateKnowledgeBase`<br />`wisdom:ListKnowledgeBases` | 

## Página Connect AI agents
<a name="wisdom-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver dominios e integraciones | `wisdom:ListAssistantAssociations`<br />`appflow:DescribeConnectorProfiles`<br />`app-integrations:GetDataIntegration`<br />`connect:DescribeInstance`<br />`connect:DescribeInstanceAttribute`<br />`connect:ListIntegrationAssociations`<br />`kms:DescribeKey`<br />`kms:ListGrants`<br />`wisdom:GetAssistant`<br />`wisdom:GetKnowledgeBase`<br />`wisdom:ListAssistantAssociations` | 
| Agregar o eliminar dominios | `connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`iam:DeleteRolePolicy`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:DescribeKey`<br />`kms:ListAliases`<br />`wisdom:CreateAssistant`<br />`wisdom:DeleteAssistant`<br />`wisdom:GetAssistant`<br />`wisdom:ListAssistantAssociations`<br />`wisdom:ListAssistants`<br />`wisdom:TagResource` | 
| Agregar o eliminar integraciones | `wisdom:ListAssistantAssociations`<br />`app-integrations:CreateDataIntegration`<br />`app-integrations:CreateDataIntegrationAssociation`<br />`app-integrations:DeleteDataIntegrationAssociation`<br />`app-integrations:GetDataIntegration`<br />`app-integrations:ListDataIntegrations`<br />`appflow:CreateConnectorProfile`<br />`appflow:CreateFlow`<br />`appflow:DeleteFlow`<br />`appflow:DescribeConnector`<br />`appflow:DescribeConnectorEntity`<br />`appflow:DescribeConnectorProfiles`<br />`appflow:DescribeConnectors`<br />`appflow:DescribeFlow`<br />`appflow:ListConnectorEntities`<br />`appflow:StartFlow`<br />`appflow:StopFlow`<br />`appflow:TagResource`<br />`appflow:UseConnectorProfile`<br />`connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`connect:ListIntegrationAssociations`<br />`iam:DeleteRolePolicy`<br />`iam:PutRolePolicy`<br />`kms:CreateGrant`<br />`kms:Decrypt`<br />`kms:DescribeKey`<br />`kms:GenerateDataKey`<br />`kms:ListAliases`<br />`kms:ListGrants`<br />`secretsmanager:CreateSecret`<br />`secretsmanager:PutResourcePolicy`<br />`wisdom:CreateAssistantAssociation`<br />`wisdom:CreateKnowledgeBase`<br />`wisdom:DeleteAssistantAssociation`<br />`wisdom:DeleteKnowledgeBase`<br />`wisdom:GetAssistant`<br />`wisdom:GetKnowledgeBase`<br />`wisdom:ListAssistantAssociations`<br />`wisdom:ListKnowledgeBases`<br />`wisdom:TagResource` | 

## Página de Voice ID
<a name="voiceid-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver integraciones de Voice ID | `voiceid:DescribeDomain`<br />`voiceid:ListDomains`<br />`voiceid:RegisterComplianceConsent`<br />`voiceid:DescribeComplianceConsent`<br />`connect:ListIntegrationAssociations` | 
| Editar integraciones de Voice ID | `voiceid:DescribeDomain`<br />`voiceid:ListDomains`<br />`voiceid:RegisterComplianceConsent`<br />`voiceid:DescribeComplianceConsent`<br />`voiceid:UpdateDomain`<br />`voiceid:CreateDomain`<br />`connect:ListIntegrationAssociations`<br />`connect:CreateIntegrationAssociation`<br />`connect:DeleteIntegrationAssociation`<br />`events:PutRule`<br />`events:DeleteRule`<br />`events:PutTargets`<br />`events:RemoveTargets`<br />`iam:PutRolePolicy` | 

## Página de previsión, planificación de capacidad y programación
<a name="forecasting-page"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Ver previsión, planificación de la capacidad y programación | `connect:DescribeForecastingPlanningSchedulingIntegration` | 
| Habilitar previsión, planificación de capacidad y programación | `connect:UpdateInstanceAttribute`<br />`connect:StartForecastingPlanningSchedulingIntegration` | 
| Deshabilitar revisión, planificación de la capacidad y programación | `connect:UpdateInstanceAttribute`<br />`connect:StopForecastingPlanningSchedulingIntegration` | 

## Federaciones
<a name="federations"></a>

### Federación de SAML
<a name="saml-federation"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Federación de SAML | `connect:GetFederationToken` | 

### Admin/Emergency federación
<a name="admin-emergency-federation"></a>


| Action/Use caso | Permisos necesarios | 
| --- | --- | 
| Admin/Emergency federación | `connect:AdminGetEmergencyAccessToken` |