Posted On: Jun 28, 2023
We are excited to launch delegated administrator for Amazon Organizations to help you delegate the management of your Amazon Organizations policies, enabling you to govern your organization and member accounts with increased agility and decentralization. You can now allow member accounts to manage policy types specific to their needs. By specifying fine-grained permissions, you can balance flexibility with limiting access to your highly privileged management accounts.
You can use Amazon Organizations to centrally manage and govern multiple accounts with Amazon Web Services Cloud. As you scale operations and need to manage more accounts within Amazon Organizations, implementing and scaling policy administration requires coordination between multiple teams, and can take more time. You can now delegate the management of policies to designated member accounts that are known as delegated administrators for Amazon Organizations. You can select any Amazon Organization policy types available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD — and specify permissible actions. Once delegated access, users with the right permissions can go to the Amazon Organizations console, see and manage policies that they have permissions for, and create their own policies.
Delegated administrator for Amazon Organizations is available to all customers at no additional charge. The service endpoints for Amazon Organizations are located in the Amazon Web Services China (Ningxia) Region, operated by NWCD. This feature is also available in all Amazon Web Services public regions.
To learn more, go to Delegated administrator for Amazon Organizations user guide.