# List user permissions for AWS Identity Center(AWS IDC)
List all users and their corresponding permission set within an AWS Identity Center instance. AWS Identity Center is the new name for AWS SSO.
This will iterate through all users, and determine their permission sets (either directly attached to the user, or via a Group).
## Install & Use
As a pre-requisite, you will need Python 3.9 and above to run.
Run the following command to pip install the package:
pip install list-user-permissions-for-aws-idc
## Use
list-user-permissions-for-aws-idc
Ensure that the you run this in the account where AWS Identity Center (previously AWS SSO) instance is setup, and the in the correct region.
You may supply a region and aws profile if you use the non default:
list-user-permissions-for-aws-idc --profile my-org-profile --region us-east-1
## Output
The script outputs two files, a short 5 column CSV, and a long jsonl file.
The jsonl file contains all details about the user, account, permission set, and group (if applicable), in a denormalized jsonl file. This file contains one json document per line, to make discovery easy.
The csv file contains only the 5 columns:
* User Name (this is the user's display name in AWS IDC)
* Account Name (the name of the account in AWS Organizations)
* Permission Set Name (the name of the permission set)
* InheritfromGroup (a column to indicate if the user inherited the permissions from a group or not)
* GroupName (if the user inherited this permission set from a group, this is the name of that group)
## Notes
If an account or permission set exists with no users attached to it, this report will not have a item on the list for it. Only permissions sets with account assignments associated with actual users will appear on the list.
Similarly, groups with no users as members will also not appear on the list.
Raw data
{
"_id": null,
"home_page": "https://github.com/aws-samples/list-user-permissions-for-aws-idc",
"name": "list-user-permissions-for-aws-idc",
"maintainer": null,
"docs_url": null,
"requires_python": "<4.0,>=3.9",
"maintainer_email": null,
"keywords": "aws, idc, sso",
"author": "Keith Rozario",
"author_email": "krozario@amazon.com",
"download_url": "https://files.pythonhosted.org/packages/89/04/2db04e6cfac8d5ec0ce78d1566e6f5b7ca02604c0bc6809067386ef56015/list_user_permissions_for_aws_idc-0.1.2.tar.gz",
"platform": null,
"description": "# List user permissions for AWS Identity Center(AWS IDC)\n\nList all users and their corresponding permission set within an AWS Identity Center instance. AWS Identity Center is the new name for AWS SSO.\n\nThis will iterate through all users, and determine their permission sets (either directly attached to the user, or via a Group).\n\n## Install & Use\n\nAs a pre-requisite, you will need Python 3.9 and above to run.\n\nRun the following command to pip install the package:\n\n pip install list-user-permissions-for-aws-idc\n \n## Use\n\n list-user-permissions-for-aws-idc\n\nEnsure that the you run this in the account where AWS Identity Center (previously AWS SSO) instance is setup, and the in the correct region. \n\nYou may supply a region and aws profile if you use the non default:\n\n list-user-permissions-for-aws-idc --profile my-org-profile --region us-east-1\n\n## Output\n\nThe script outputs two files, a short 5 column CSV, and a long jsonl file. \n\nThe jsonl file contains all details about the user, account, permission set, and group (if applicable), in a denormalized jsonl file. This file contains one json document per line, to make discovery easy.\n\nThe csv file contains only the 5 columns:\n\n* User Name (this is the user's display name in AWS IDC)\n* Account Name (the name of the account in AWS Organizations)\n* Permission Set Name (the name of the permission set)\n* InheritfromGroup (a column to indicate if the user inherited the permissions from a group or not)\n* GroupName (if the user inherited this permission set from a group, this is the name of that group)\n\n## Notes\n\nIf an account or permission set exists with no users attached to it, this report will not have a item on the list for it. Only permissions sets with account assignments associated with actual users will appear on the list.\n\nSimilarly, groups with no users as members will also not appear on the list.\n\n",
"bugtrack_url": null,
"license": "MIT",
"summary": "List users and permissions inside AWS Identity Center",
"version": "0.1.2",
"project_urls": {
"Homepage": "https://github.com/aws-samples/list-user-permissions-for-aws-idc",
"Repository": "https://github.com/aws-samples/list-user-permissions-for-aws-idc"
},
"split_keywords": [
"aws",
" idc",
" sso"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "4d5bc17d70b3eb44fed7824b9a2038c4de1e466ee47336c46373362e86f0f7e3",
"md5": "e8b9bd2f9841efd5fa6c831070094705",
"sha256": "1bb72012bdea429892435bf152750ddc5858da132ae69c1f76328182233d3981"
},
"downloads": -1,
"filename": "list_user_permissions_for_aws_idc-0.1.2-py3-none-any.whl",
"has_sig": false,
"md5_digest": "e8b9bd2f9841efd5fa6c831070094705",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": "<4.0,>=3.9",
"size": 7325,
"upload_time": "2024-07-17T00:16:17",
"upload_time_iso_8601": "2024-07-17T00:16:17.322113Z",
"url": "https://files.pythonhosted.org/packages/4d/5b/c17d70b3eb44fed7824b9a2038c4de1e466ee47336c46373362e86f0f7e3/list_user_permissions_for_aws_idc-0.1.2-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "89042db04e6cfac8d5ec0ce78d1566e6f5b7ca02604c0bc6809067386ef56015",
"md5": "d57200c39dd95f61e79e2953ce1d6ab0",
"sha256": "f4a6884eb8ffa692e5aea779c8b2a1a4b2ba24016b4b7af8b9791e90c4de1d0d"
},
"downloads": -1,
"filename": "list_user_permissions_for_aws_idc-0.1.2.tar.gz",
"has_sig": false,
"md5_digest": "d57200c39dd95f61e79e2953ce1d6ab0",
"packagetype": "sdist",
"python_version": "source",
"requires_python": "<4.0,>=3.9",
"size": 5353,
"upload_time": "2024-07-17T00:16:19",
"upload_time_iso_8601": "2024-07-17T00:16:19.188615Z",
"url": "https://files.pythonhosted.org/packages/89/04/2db04e6cfac8d5ec0ce78d1566e6f5b7ca02604c0bc6809067386ef56015/list_user_permissions_for_aws_idc-0.1.2.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2024-07-17 00:16:19",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "aws-samples",
"github_project": "list-user-permissions-for-aws-idc",
"travis_ci": false,
"coveralls": false,
"github_actions": false,
"lcname": "list-user-permissions-for-aws-idc"
}
JSON
