Reset every helpdesk user's roles to your default set

The scenario walks every user in AWS IAM and sets them to your chosen default roles, skipping anyone on your exception list.

  • Uniform access across the team in one run
  • An exception list for the people you don't touch
  • Roles can be exported as a sheet and eyeballed first
  • One sweep clears years of "temporary" grants