IAM Access Analyzer Delegated admin and Org configuration, doesnt pick up root account



I have delegated admin to a security account for IAM access analyser and a few other AWS security features (security hub, guard duty). They all currently work and connect to all accounts. But for some reason, IAM Access analyser has not registered with the root account.

Is there a way to connect it to the delegated admin account?

1 Answer


Thank you for reaching out to AWS:repost, I understand that you are having trouble with your IAM Access Analyzer and registering it with your root account.

From my investigation, only your AWS Organizations management account can add remove, or changed a delegated admin. Login into AWS IAM Console -> Select Access Analyzer -> Choose settings -> Choose Add delegated administrator -> Enter account number of an organization member to make the delegated admin

Please take a look into this document for a deeper dive into your query. [1]

Please contact if you have any further questions, or reach out to us via a support case to facilitate a discussion on the specifics of your resources.

Hope you have a wonderful day.

[1] Delegated administrator for Access Analyzer - https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-settings.html

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions