- Newest
- Most votes
- Most comments
Hello.
I watched the video.
You configured an IAM Identity Center user, not an IAM user.
IAM users and IAM Identity Center users are different.
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_identity-management.html
Users created with IAM Identity Center will not be able to access your AWS account unless you link them to your AWS account using the steps in the document below.
At this time, we set what are called permission sets to set what operations are allowed within the AWS account.
https://docs.aws.amazon.com/singlesignon/latest/userguide/get-started-assign-account-access-user.html
Permission sets can be created by following the steps in the document below.
https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html
Hi Dominique,
It appears that you've created the user but it's not clear if they the correct permission set has been assigned. Because you have already created the user (seen in the video), can you please check if you've done the following and if not, follow these steps:
-
In IAM Identity Center, navigate to AWS Accounts from the left-side menu.
-
Choose the account(s) you want to give access to and click Assign Users.
-
Search for the user that you want to assign permissions to.
-
Select the user then click Next.
-
On the next screen, assign a permission set to the user. A permission set is a predefined set of permissions that determines what level of access the user will have.
-
You can use an existing permission set like AdministratorAccess, PowerUserAccess, or ReadOnlyAccess from the "Predefined" ones, or you can create a custom permission set.
-
Once the appropriate one is selected, click Next
-
On the next screen, check the options and if happy with them, click Next
-
On the final screen, review the settings and click "Create"
-
Test the user’s access.
The user will receive an email with instructions to log in via the IAM Identity Center portal. They will log in and be able to choose the AWS account and role associated with the permission set you assigned.
Hope this helps!
Steps to Grant an IAM User Access:
- Create an IAM User:
- Go to IAM Console > Users > Add User.
- Set up username and choose Access Type (Programmatic Access or AWS Management Console).
- Attach Policies:
- Assign the necessary permissions by attaching IAM Policies (e.g., Administrator Access, AmazonS3FullAccess, etc.).
- Configure Multi-Factor Authentication (Optional):
- Set up MFA if required for added security.
- Share Login Details:
- Provide the IAM user's console link, username, and temporary or permanent credentials.
Relevant content
- AWS OFFICIALUpdated 9 months ago

did you have a chance to watch the video? This isn't exactly the question. Already gave IAM access. Now the user needs access to be granted access to the AWS environment.
User Login:
After creating the IAM user, make sure they log in via the AWS Management Console URL you provide. The login URL format is: https://<AWS_ACCOUNT_ID>.signin.aws.amazon.com/console.
Granting Console Access:
If the IAM user needs to access the AWS Console (not just API calls), make sure you selected the "AWS Management Console access" option during setup. You should have set a password for console login or sent them temporary credentials.
Login URL Misconfiguration:
The user might be trying to log in with the wrong AWS account ID or login URL. Make sure they are using the correct IAM user credentials and correct account login link.
Roles (if needed):
In some scenarios, users need to assume a role in addition to having basic IAM permissions. This can be done through the IAM console or via API calls.