Optional ReadonlydomainOptional ReadonlyeligibleIdentities allowed to be added to project member pools within this scope. Grants the ADD_TO_PROJECT_MEMBER_POOL authorization policy.
Use cases: Controlling who can be invited to projects; Member pool scoping
AWS: DataZone ADD_TO_PROJECT_MEMBER_POOL authorization policy
Validation: Optional; AuthorizationIdentities object
Optional ReadonlyenvironmentIdentities allowed to create environments within this scope. Grants the CREATE_ENVIRONMENT authorization policy.
Use cases: Self-service environment provisioning; Team environment management
AWS: DataZone CREATE_ENVIRONMENT authorization policy
Validation: Optional; AuthorizationIdentities object
Optional ReadonlyglossaryIdentities allowed to create business glossaries within this scope. Grants the CREATE_GLOSSARY authorization policy.
Use cases: Data steward glossary management; Business term definition
AWS: DataZone CREATE_GLOSSARY authorization policy
Validation: Optional; AuthorizationIdentities object
Optional ReadonlyprojectIdentities allowed to create projects. Grants CREATE_PROJECT on DataZone (V1) domains and CREATE_PROJECT_FROM_PROJECT_PROFILE on SageMaker Unified Studio (V2) domains.
Use cases: Project creation for team leads; Self-service project provisioning
AWS: DataZone CREATE_PROJECT or CREATE_PROJECT_FROM_PROJECT_PROFILE authorization policy
Validation: Optional; AuthorizationIdentities object
Identities allowed to create child domain units under this scope. Grants the CREATE_DOMAIN_UNIT authorization policy.
Use cases: Delegated organizational structure management; Team lead administration
AWS: DataZone CREATE_DOMAIN_UNIT authorization policy
Validation: Optional; AuthorizationIdentities object