Creating Granular IAM Permissions for Non-Admin Users