> For the complete documentation index, see [llms.txt](https://docs.langstack.com/welcome/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.langstack.com/welcome/in-depth-learning/connectors/aws-connector/set-up-amazon-web-services-cognito-console/manage-permissions-for-roles.md).

# Manage Permissions for Roles

To set the permission for the roles, follow the steps below:

* To manage the permissions for the roles, click on Services>IAM or search for IAM.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermclkiam.png" alt=""><figcaption></figcaption></figure>

* In the IAM Dashboard, on the left hand panel, click on “Roles”.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermiamroles.png" alt=""><figcaption></figcaption></figure>

* A list of roles displays for the identity pool.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermiamrollst.png" alt=""><figcaption></figcaption></figure>

* Search for the created pool.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermtpidroleslst.png" alt=""><figcaption></figcaption></figure>

* Click on the role name to set permissions for it. For this exercise, first click on “Cognito\_testpoolid1Auth\_Role”.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermtpidclktpd1auth.png" alt=""><figcaption></figcaption></figure>

* The summary page for the role displays. Click on the “Trust relationships” tab. Ensure correct Identity Pool id.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermtrstrel.png" alt=""><figcaption></figcaption></figure>

* To set up permissions, click on “Add Permissions”.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermaddperm.png" alt=""><figcaption></figcaption></figure>

* Click on “Attach policies”.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermattchpolcarr.png" alt=""><figcaption></figcaption></figure>

* The “Other permissions policies” page displays. Search for S3 and select ““AmazonS3FullAccess”.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagperms3fullacc.png" alt=""><figcaption></figcaption></figure>

* Search for Cognito and select and click \[Attach policies].

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermsclckattpolcwarr.png" alt=""><figcaption></figcaption></figure>

* A message for successful addition of policy displays.

<figure><img src="https://media.langstack.com/documentation/media/images/connector/awss3connector/awsmagpermspolcattchd.png" alt=""><figcaption></figcaption></figure>

* No permissions need to be set up for ““Cognito\_testidpool1Unauth\_Role”.
