Why can't I add a user to an account without specifying a permission set if that user is already in a group that's in the account with a permission set?

0

To repro:

  • Start a new account
  • Agree to the IAM and organisation stuff.
  • Make two standard permission sets: SystemAdministrator and ViewOnlyAccess.
  • Make a group and a user, the user being in the group.
  • Add the group to the account with the SystemAdministrator permission set.
  • Try to add the user.
  • Notice that you must choose a permission set in order to add the user. I think it should be OK to add the user with no permission set cos they inherit the SystemAdministrator permission from the group anyway.
  • Choose the ReadOnlyUser set
  • Log in as this user and notice that both SystemAdministrator and ReadOnlyUser are offered, thus showing that indeed the SystemAdministrator permission set was inherited from the group. Choose SystemAdministrator and launch an instance to further confirm the same.

Seems like a bug to me.

已提問 9 個月前檢視次數 90 次
沒有答案

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南