title: Different levels of access for AWS Cognito
body: <p>I'm trying to build a web app that can be accessed by any user that signs up with facebook. 
  I want to use AWS Cognito to speed up the development for users management.</p>
  
  <p>It has to have 3 type of users: </p>
  
  <ul>
  <li>Normal users - any user that logs in with facebook</li>
  <li>Editors - users that have a different access level (IAM role?), they can call a specific AWS Lambda function, that normal users can't call.</li>
  <li>Administrators - users that can modify the status of normal users to make them editors or admins</li>
  </ul>
  
  <p>Can someone please point me in the right direction? I've set up AWS Cognito Identity Pool but I'm not sure if I have to set up a User Pool or how do I assign a different role or policy to a user to make him an admin or editor (different access levels for other AWS resources), if I can get in my web app the users list from Cognito (only for an authenticated admin) and how do I allow him to modify other users roles.</p>
  
  <p>Some tutorial, documentation or at least a short description of how can I do this would help me a lot.</p>
  
  <p>Optional: let users to not only sign up with facebook but also with email/pass, and have the same functionality.</p>