How to Provide Group-Level Identity Center Access To Outside Administrator

Question

Hi, I have multiple active groups from different organizations within my identity center. One client is asking for a way to access their group (and assigned users) so they can more easily handle password resets, disable access, etc. I'm having trouble figuring out how, and I absolutely cannot risk them being able to see ALL users and ALL groups from other orgs in there. How could this be done?

Gary Mclean · Answer

Following example 4 without looking into the resources you could create a policy that grants access to a list of users/resources.

I’ve not tried this myself but worth a look.

https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexamplemanageusersgroups

How to Provide Group-Level Identity Center Access To Outside Administrator

Añade tu respuesta

Contenido relevante