---
title: "POST /accounts/{AwsAccountId}/data-sources/{DataSourceId}/permissions"
method: POST
path: "/accounts/{AwsAccountId}/data-sources/{DataSourceId}/permissions"
---

# POST /accounts/{AwsAccountId}/data-sources/{DataSourceId}/permissions

`POST /accounts/{AwsAccountId}/data-sources/{DataSourceId}/permissions`

Updates the permissions to a data source.

## Path parameters

- `AwsAccountId` string, required
- `DataSourceId` string, required

## Request body

- object
  - `GrantPermissions` ResourcePermission[] — A list of resource permissions that you want to grant on the data source.
    - `Principal` string, required — <p>The Amazon Resource Name (ARN) of the principal. This can be one of the following:</p> <ul> <li> <p>The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)</p> </li> <li> <p>The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)</p> </li> <li> <p>The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) </p> </li> </ul>
    - `Actions` String[], required — The IAM action to grant or revoke permissions on.
  - `RevokePermissions` ResourcePermission[] — A list of resource permissions that you want to revoke on the data source.
    - `Principal` string, required — <p>The Amazon Resource Name (ARN) of the principal. This can be one of the following:</p> <ul> <li> <p>The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)</p> </li> <li> <p>The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)</p> </li> <li> <p>The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) </p> </li> </ul>
    - `Actions` String[], required — The IAM action to grant or revoke permissions on.

## Response `200`

Success

- UpdateDataSourcePermissionsResponse
  - `DataSourceArn` string — The Amazon Resource Name (ARN) of the data source.
  - `DataSourceId` string — The ID of the data source. This ID is unique per Amazon Web Services Region for each Amazon Web Services account.
  - `RequestId` string — The Amazon Web Services request ID for this operation.
  - `Status` integer — The HTTP status of the request.

## Other responses

- `480` — AccessDeniedException
- `481` — ConflictException
- `482` — InvalidParameterValueException
- `483` — ResourceNotFoundException
- `484` — ThrottlingException
- `485` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/quicksight.md) · [All operations](https://skmtc.net/aws/apis/quicksight/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/quicksight/versions/2f2bbd7e70ca/schema)