Create a new full access user

Question

Hi,

I would like to change the root user access from myself to my business partner. I created a new IAM account, and he can access it without issues, but he currently doesn't have access to much, especially in terms of cost and billing. I've added my colleague to an admin group, and I've made sure he has permission to grant the AdministratorAccess permission.
Is there any additional permission to grant him for him to have full access, and even better, is there a way for me to transfer him the full access that I currently have?

Regards,
Gautier

Answer

Please see the following article for information on the AWS account transfer process.

https://repost.aws/knowledge-center/transfer-aws-account

To grant IAM users access to billing information, please see the following document.

https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_billing.html

Answer

Here's a step-by-step guide on how to ensure your business partner has full access and considerations you might have for transferring root user privileges:
* Add your colleague to an admin group with AdministratorAccess policy for full AWS services and resources access.
* Enable IAM User and Role Access to Billing Information under Account Settings in the Billing and Cost Management Dashboard for billing access.
* Check for any explicit deny policies that might limit access, even with AdministratorAccess.
* Use the root account only for initial IAM user creation and lock it away securely afterward.
* Update contact details under Account Settings for operational control, but not ownership transfer.
* Secure the root account with multi-factor authentication (MFA) and consider transferring or resetting the MFA device for your business partner.
* Transferring root user credentials is not recommended; contact AWS Support for guidance on account ownership changes.

Create a new full access user

Relevant content