Delete permission sets - Amazon IAM Identity Center
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Delete permission sets

Before you can delete a permission set from IAM Identity Center, you must remove it from all Amazon Web Services accounts that use the permission set. To check existing user and group access, see View user and group assignments.

To remove a permission set from an Amazon Web Services account

  1. Open the IAM Identity Center console.

  2. Under Multi-account permissions, choose Amazon Web Services accounts.

  3. On the Amazon Web Services accounts page, a tree view list of your organization appears. Select the name of the Amazon Web Services account from which you want to remove the permission set.

  4. On the Overview page for the Amazon Web Services account, choose the Permission sets tab.

  5. Select the check box next to the permission set that you want to remove, and then choose Remove.

  6. In the Remove permission set dialog box, confirm that the correct permission set is selected, type Delete to confirm removal, and then choose Remove access.

Use the following procedure to delete one or more permission sets so that they can no longer be used by any Amazon Web Services account in the organization.

Note

All users and groups that have been assigned this permission set, regardless of what Amazon Web Services account is using it, will no longer be able to sign in. To check existing user and group access, see View user and group assignments.

To delete a permission set from an Amazon Web Services account

  1. Open the IAM Identity Center console.

  2. Under Multi-account permissions, choose Permission sets.

  3. Select the permission set that you want to delete, and then choose Delete.

  4. In the Delete permission set dialog box, type the name of the permission set to confirm deletion, and then choose Delete. The name is case-sensitive.