permissionType
Use this parameter if you want to change a workspace from SERVICE_MANAGED
to CUSTOMER_MANAGED
. This allows you to manage the permissions that the workspace uses to access datasources and notification channels. If the workspace is in a member Amazon Web Services account of an organization, and that account is not a delegated administrator account, and you want the workspace to access data sources in other Amazon Web Services accounts in the organization, you must choose CUSTOMER_MANAGED
.
If you specify this as CUSTOMER_MANAGED
, you must also specify a workspaceRoleArn
that the workspace will use for accessing Amazon Web Services resources.
For more information on the role and permissions needed, see Amazon Managed Grafana permissions and policies for Amazon Web Services data sources and notification channels
Do not use this to convert a CUSTOMER_MANAGED
workspace to SERVICE_MANAGED
. Do not include this parameter if you want to leave the workspace as SERVICE_MANAGED
.
You can convert a CUSTOMER_MANAGED
workspace to SERVICE_MANAGED
using the Amazon Managed Grafana console. For more information, see Managing permissions for data sources and notification channels.