By using AWS re:Post, you agree to the Terms of Use
/Root account no permissions/

Root account no permissions

0

Hi All,

I have not used my Amazon account for a while. I think it was free-tier to begin with. I wanted to start re-using it.

I logged on and find I have no access to Billing. I also have no access to Organizations. I can assign privileges to IAM users. I had an existing user under IAM and I gave it Administrator and BillingAccess privileges. I logged on with that user, but when it browses to Organizations or Billing, it also gets permission denied issues.

Example with root account accessing "Account": You Need Permissions You don't have permission to access billing information for this account. Contact your AWS administrator if you need help. If you are an AWS administrator, you can provide permissions for your users or groups by making sure that (1) this account allows IAM and federated users to access billing information and (2) you have the required IAM permissions.

I get the same error when IAM user with billing permissions accesses "Billing".

I cannot even create a support case using root account. It says I have no access and I was placed in support plan Basic, but then there is no way to create a case. When I click "Create case": An error occurred when we tried to process your request User: arn:aws:iam::ID:root is not authorized to perform: support:DescribeServices with an explicit deny in a service control policy User: arn:aws:iam::ID:root is not authorized to perform: support:DescribeSeverityLevels with an explicit deny in a service control policy

You don't have the necessary IAM permissions to view that support case. Learn more

Then under "Create case" the various case options are grayed out.

Thanks!

1 Answers
0
Accepted Answer

Found the solution to my own issue. At one point I created another account (free-tier) and added my initial account into that under Organizations. That is why I could not do any management from within the old account. I went into the newest account and removed the old account from Organizations. I can now do everything I need from within the old account again.

answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions