Skip to content

See cost and usage as a User

0

I'm the only user. From a root login, I have setup the user with the right permissions:

  • AdministratorAccess
  • Custom policy to allow all on "ce.*"

When I login as user, I still get an access denied: "IAM user access not activated." Screenshot

Which roles should I add or what should I change to have this user 'activated' for the cost and usage. The user is able to login and work for example with S3.

asked a year ago499 views

3 Answers
1

This is a common issue with AWS billing access. Even though your IAM user has AdministratorAccess and custom policies for Cost Explorer, there's a specific account-level setting that needs to be enabled first.

By default, IAM users cannot access billing information (including Cost Explorer) even if they have administrative privileges. This is a security feature in AWS.

To resolve this issue, you need to explicitly activate IAM access to the Billing and Cost Management console. This can only be done by the AWS account root user by following these steps:

  1. Sign in to the AWS Management Console with your root user credentials
  2. On the navigation bar, select your account name, and then select Account
  3. Scroll down to find the section "IAM User and Role Access to Billing Information"
  4. Select Edit
  5. Check the "Activate IAM Access" box
  6. Choose Update

After completing these steps, the system will display a message that "IAM user/role access to billing information is activated." Once this setting is enabled, your IAM user with the appropriate permissions will be able to access Cost Explorer and other billing information.

The error message "IAM user access not activated" specifically indicates that this account-level setting hasn't been enabled yet, rather than an issue with the IAM user's permissions.
Sources
User cannot view the billing dashboard | AWS re:Post
Access denied even though ive set permissions | AWS re:Post
Billing: Access Denied | AWS re:Post
Cannot access cost explorer despite being admin | AWS re:Post

answered a year ago

EXPERT

reviewed a year ago

0
Accepted Answer

Hi, If it’s a new account, it’s likely that IAM Access to billing has not been activated. By default IAM users (and roles) in an account will have not access to billing console even if they have been provided with permissions.

You can activate it with the root user

https://docs.aws.amazon.com/IAM/latest/UserGuide/getting-started-account-iam.html

AWS

answered a year ago

EXPERT

reviewed a year ago

0

This worked perfectly, thanks for the quick response.

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.