title: How do we add policies in AWS Glue console "Settings tab"
body: <p>I am logged in with an admin account and still getting error insufficient lakeformation permission when deleting a Glue database.</p>
  <p>I found an option to attach policies in Glue Console &quot;settings tab&quot; but it is throwing error:</p>
  <blockquote>
  <p>The passed in policy has a statement with no principals!&quot;,&quot;type&quot;:&quot;AwsServiceError&quot;}.</p>
  </blockquote>
  <p>Here is the policy I have attached which should work fine:</p>
  <pre class="lang-json prettyprint-override"><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: [
                  &quot;glue:GetDatabase&quot;,
                  &quot;glue:CreateDatabase&quot;
              ],
              &quot;Resource&quot;: [
                  &quot;arn:aws:glue:ap-southeast-1:account_no:catalog&quot;,
                  &quot;arn:aws:glue:ap-southeast-1:account_no:database/db_name&quot;,
                  &quot;arn:aws:glue:ap-southeast-1:account_no::table/db_name/*&quot;,
                  &quot;arn:aws:glue:ap-southeast-1:account_no:userDefinedFunction/db_name/*&quot;
              ]
          },
          {
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: [
                  &quot;glue:GetDatabase&quot;,
                  &quot;glue:DeleteDatabase&quot;
              ],
              &quot;Resource&quot;: [
                  &quot;arn:aws:glue:ap-southeast-1:account_no:catalog&quot;,
                  &quot;arn:aws:glue:ap-southeast-1:account_no:database/db_name&quot;,
                  &quot;arn:aws:glue:ap-southeast-1:account_no::table/db_name/*&quot;,
                  &quot;arn:aws:glue:ap-southeast-1:account_no:userDefinedFunction/db_name/*&quot;
              ]
          }
      ]
  }
  </code></pre>