Intended audience

The following table lists the roles used in this tutorial to create a data lake.

Intended audience
Role	Description
IAM Administrator	Has the AWS managed policy: AdministratorAccess. Can create IAM roles and Amazon S3 buckets.
Data lake administrator	User who can access the data catalog, create databases, and grant Lake Formation permissions to other users. Has fewer IAM permissions than the IAM administrator, but enough to administer the data lake.
Data analyst	User who can run queries against the data lake. Has only enough permissions to run queries.
Workflow role	Role with the required IAM policies to run a workflow. For more information, see (Optional) Create an IAM role for workflows.