I want to remove a member account from an organization and turn that account into a standalone account. However, I can't sign in to the member account. What should I do?
To gain access to a member account in an organization, first try the following:
- Contact the administrator of the member account and ask them to grant you access.
- If you have access to the email address associated with the account, but have forgotten the password, reset the password.
If the preceding steps don't work, use AWS Identity and Access Management (IAM) to assume an administrator's role for the account:
Add permissions to assume an administrator's IAM role for the member account. For more information, see Accessing a member account that has a management account access role. Then, switch to the IAM role in the AWS Management Console. After you assume the OrganizationAccountAccessRole for the member account, do the following:
- Open the IAM console, choose Users from the navigation pane, and then choose Add user.
- Enter a user name, and then select AWS Management Console access.
- Select Custom password, and then enter a password.
- Clear Require password reset.
- Choose Next: Permissions.
- Choose Attach existing policies directly, choose AdministratorAccess from the list of policies, and then choose Next: Tags.
- (Optional) On the Add tags page, enter values for Key and Value.
- Choose Next: Review.
- Review the details of your new IAM user, and then choose Create user.
After you complete these steps, verify the necessary details, and then remove the member account from the organization.
Note: If you want to close a member account and make sure that additional charges aren't incurred, open the AWS Organizations console. Then, follow the instructions at Closing an AWS account. You can also close the account by signing in as the root user of your member account.
Accessing and administering the member accounts in your organization
How do I remove a member account from an organization's consolidated bill in AWS Organizations?