---
title: "PUT /accounts/{AwsAccountId}/themes/{ThemeId}/permissions"
method: PUT
path: "/accounts/{AwsAccountId}/themes/{ThemeId}/permissions"
---

# PUT /accounts/{AwsAccountId}/themes/{ThemeId}/permissions

`PUT /accounts/{AwsAccountId}/themes/{ThemeId}/permissions`

Updates the resource permissions for a theme. Permissions apply to the action to grant or revoke permissions on, for example `"quicksight:DescribeTheme"`.

Theme permissions apply in groupings. Valid groupings include the following for the three levels of permissions, which are user, owner, or no permissions:

*   User
    
    *   `"quicksight:DescribeTheme"`
        
    *   `"quicksight:DescribeThemeAlias"`
        
    *   `"quicksight:ListThemeAliases"`
        
    *   `"quicksight:ListThemeVersions"`
        
*   Owner
    
    *   `"quicksight:DescribeTheme"`
        
    *   `"quicksight:DescribeThemeAlias"`
        
    *   `"quicksight:ListThemeAliases"`
        
    *   `"quicksight:ListThemeVersions"`
        
    *   `"quicksight:DeleteTheme"`
        
    *   `"quicksight:UpdateTheme"`
        
    *   `"quicksight:CreateThemeAlias"`
        
    *   `"quicksight:DeleteThemeAlias"`
        
    *   `"quicksight:UpdateThemeAlias"`
        
    *   `"quicksight:UpdateThemePermissions"`
        
    *   `"quicksight:DescribeThemePermissions"`
        
*   To specify no permissions, omit the permissions list.

## Path parameters

- `AwsAccountId` string, required
- `ThemeId` string, required

## Request body

- object
  - `GrantPermissions` ResourcePermission[] — A list of resource permissions to be granted for the theme.
    - `Principal` string, required — <p>The Amazon Resource Name (ARN) of the principal. This can be one of the following:</p> <ul> <li> <p>The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)</p> </li> <li> <p>The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)</p> </li> <li> <p>The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) </p> </li> </ul>
    - `Actions` String[], required — The IAM action to grant or revoke permissions on.
  - `RevokePermissions` ResourcePermission[] — A list of resource permissions to be revoked from the theme.
    - `Principal` string, required — <p>The Amazon Resource Name (ARN) of the principal. This can be one of the following:</p> <ul> <li> <p>The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)</p> </li> <li> <p>The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)</p> </li> <li> <p>The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) </p> </li> </ul>
    - `Actions` String[], required — The IAM action to grant or revoke permissions on.

## Response `200`

Success

- UpdateThemePermissionsResponse
  - `ThemeId` string — The ID for the theme.
  - `ThemeArn` string — The Amazon Resource Name (ARN) of the theme.
  - `Permissions` ResourcePermission[] — The resulting list of resource permissions for the theme.
    - `Principal` string, required — <p>The Amazon Resource Name (ARN) of the principal. This can be one of the following:</p> <ul> <li> <p>The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)</p> </li> <li> <p>The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)</p> </li> <li> <p>The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) </p> </li> </ul>
    - `Actions` String[], required — The IAM action to grant or revoke permissions on.
  - `RequestId` string — The Amazon Web Services request ID for this operation.
  - `Status` integer — The HTTP status of the request.

## Other responses

- `480` — AccessDeniedException
- `481` — InvalidParameterValueException
- `482` — ResourceNotFoundException
- `483` — ThrottlingException
- `484` — UnsupportedUserEditionException
- `485` — LimitExceededException
- `486` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/quicksight.md) · [All operations](https://skmtc.net/aws/apis/quicksight/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/quicksight/versions/2f2bbd7e70ca/schema)