Learning Objectives:
Learn to enable AWS IAM Identity Centre.
Learn to create an admin user using AWS IAM Identity Centre.
Step 1: signing to the AWS Management Console.
New to AWS (root user) – Sign in as the account by choosing Root user and entering your email and password.
![](https://static.wixstatic.com/media/0caa51_5d5b86b959c84fcaa3235d212ccf5722~mv2.jpg/v1/fill/w_354,h_372,al_c,q_80,enc_auto/0caa51_5d5b86b959c84fcaa3235d212ccf5722~mv2.jpg)
Step 2: IAM Identity Centre
In the navigation search for IAM and Open the IAM Identity Centre.
![](https://static.wixstatic.com/media/0caa51_a3156a3242fa4b22a7ffe5936a086438~mv2.jpg/v1/fill/w_563,h_291,al_c,q_80,enc_auto/0caa51_a3156a3242fa4b22a7ffe5936a086438~mv2.jpg)
Note: You can enable this service only in one region. Here we are using Mumbai region. Choose your preferred region.
![](https://static.wixstatic.com/media/0caa51_56547e386d3c4be5b2af1312d85d1189~mv2.jpg/v1/fill/w_691,h_252,al_c,q_80,enc_auto/0caa51_56547e386d3c4be5b2af1312d85d1189~mv2.jpg)
Click on Enable (If prompted to create AWS Organisation do it)
You will be redirected to following window.
![](https://static.wixstatic.com/media/0caa51_f68eaf19040b44aa92550654f9257d0d~mv2.jpg/v1/fill/w_688,h_160,al_c,q_80,enc_auto/0caa51_f68eaf19040b44aa92550654f9257d0d~mv2.jpg)
Step 3: Create User
click on create user.
![](https://static.wixstatic.com/media/0caa51_bdb25b71652a467bb42eee66668e1332~mv2.jpg/v1/fill/w_691,h_474,al_c,q_80,enc_auto/0caa51_bdb25b71652a467bb42eee66668e1332~mv2.jpg)
Select Add user.
Under Specify user details Fill and replace your details with New admin user.
![](https://static.wixstatic.com/media/0caa51_fb2ba95074a94738af00257c1b3aa55a~mv2.jpg/v1/fill/w_534,h_469,al_c,q_80,enc_auto/0caa51_fb2ba95074a94738af00257c1b3aa55a~mv2.jpg)
3. Schroll down and click on next. Under Add user to groups click on create group.
Note: This step is optional if you don’t want to create group you can skip this stage and click on next.
![](https://static.wixstatic.com/media/0caa51_c87f0503bb4d48bf8d95bbbdfc495585~mv2.jpg/v1/fill/w_677,h_294,al_c,q_80,enc_auto/0caa51_c87f0503bb4d48bf8d95bbbdfc495585~mv2.jpg)
4. Under Review and add user tab review your details keep the rest default and click on Add user
![](https://static.wixstatic.com/media/0caa51_662d0e2d44f545e794352b54f1cc2642~mv2.jpg/v1/fill/w_619,h_291,al_c,q_80,enc_auto/0caa51_662d0e2d44f545e794352b54f1cc2642~mv2.jpg)
5. You will see the following window.
![](https://static.wixstatic.com/media/0caa51_df5d3bc99ac04f2aa8f30477f3dc14a3~mv2.jpg/v1/fill/w_689,h_219,al_c,q_80,enc_auto/0caa51_df5d3bc99ac04f2aa8f30477f3dc14a3~mv2.jpg)
Step 3: Multi-account permissions.
Under Multi-account permissions choose Permission sets, under Permission sets choose Permission sets.
![](https://static.wixstatic.com/media/0caa51_b4919f4e2e7c447c981b027adc4e00b7~mv2.jpg/v1/fill/w_278,h_129,al_c,q_80,enc_auto/0caa51_b4919f4e2e7c447c981b027adc4e00b7~mv2.jpg)
![](https://static.wixstatic.com/media/0caa51_4a21b2779efa4034b0c31d5d167a2e59~mv2.jpg/v1/fill/w_689,h_364,al_c,q_80,enc_auto/0caa51_4a21b2779efa4034b0c31d5d167a2e59~mv2.jpg)
Click on create permission set,
![](https://static.wixstatic.com/media/0caa51_e6e8362bbcf74a1faaa4aee8c9305134~mv2.jpg/v1/fill/w_686,h_262,al_c,q_80,enc_auto/0caa51_e6e8362bbcf74a1faaa4aee8c9305134~mv2.jpg)
Now you will see the following window,
![](https://static.wixstatic.com/media/0caa51_78d3b50a5d1f4198a5002aeb854c84ad~mv2.jpg/v1/fill/w_689,h_354,al_c,q_80,enc_auto/0caa51_78d3b50a5d1f4198a5002aeb854c84ad~mv2.jpg)
Select permission sets type choose Predefined permission set, scroll down.
Under Policy for predefined permission set list choose Administrator Access. And click on next.
![](https://static.wixstatic.com/media/0caa51_4b1ae652556e47daa55f2dd1784f41b3~mv2.jpg/v1/fill/w_690,h_441,al_c,q_80,enc_auto/0caa51_4b1ae652556e47daa55f2dd1784f41b3~mv2.jpg)
Under Permission set details review your Permission set name and scroll down and change the Session duration time to your prefer time, here we are giving 2 hours access to user.
![](https://static.wixstatic.com/media/0caa51_6abd1b95746e4a6f8c811af2cdb04915~mv2.jpg/v1/fill/w_555,h_425,al_c,q_80,enc_auto/0caa51_6abd1b95746e4a6f8c811af2cdb04915~mv2.jpg)
Click on next to review tab. Review the details and click on create.
![](https://static.wixstatic.com/media/0caa51_584a5633ef0948d296c0ac0dbb888efc~mv2.jpg/v1/fill/w_599,h_408,al_c,q_80,enc_auto/0caa51_584a5633ef0948d296c0ac0dbb888efc~mv2.jpg)
Here you can see the permissions set.
![](https://static.wixstatic.com/media/0caa51_4a278cd207e3498ab647d60fdb22f9bf~mv2.jpg/v1/fill/w_690,h_286,al_c,q_80,enc_auto/0caa51_4a278cd207e3498ab647d60fdb22f9bf~mv2.jpg)
Step 4: In the navigation pane, under Multi-account permissions, choose AWS accounts
![](https://static.wixstatic.com/media/0caa51_fe98fb61d72d4da9a532a50ba32f3ad8~mv2.jpg/v1/fill/w_269,h_129,al_c,q_80,enc_auto/0caa51_fe98fb61d72d4da9a532a50ba32f3ad8~mv2.jpg)
1. On the AWS accounts page, a tree view list of your accounts appears.
2. Select the check box next to the AWS account to which you want to assign
administrative access.
3. Click on Assign users or groups.
![](https://static.wixstatic.com/media/0caa51_94f4276e84cf44c5b2441ac43bc7c5cc~mv2.jpg/v1/fill/w_686,h_211,al_c,q_80,enc_auto/0caa51_94f4276e84cf44c5b2441ac43bc7c5cc~mv2.jpg)
Under user tab now you can see the new user.
On the Users tab, select the user to whom you want to grant administrative permissions. And click on next.
![](https://static.wixstatic.com/media/0caa51_5c49e9160f9246df9effd5986ff8e2c8~mv2.jpg/v1/fill/w_691,h_464,al_c,q_80,enc_auto/0caa51_5c49e9160f9246df9effd5986ff8e2c8~mv2.jpg)
Now select permission set we created in Step 3.
![](https://static.wixstatic.com/media/0caa51_0daa4866b02448f88de1a1e77ec39026~mv2.jpg/v1/fill/w_729,h_309,al_c,q_80,enc_auto/0caa51_0daa4866b02448f88de1a1e77ec39026~mv2.jpg)
Click on next.
![](https://static.wixstatic.com/media/0caa51_3d16df3d5cc14573a7af3ad38d173456~mv2.jpg/v1/fill/w_688,h_474,al_c,q_80,enc_auto/0caa51_3d16df3d5cc14573a7af3ad38d173456~mv2.jpg)
Review everything and click on submit.
Step 5: You will receive confirmation mail in your e-mail box. Click on Accept invitation.
![](https://static.wixstatic.com/media/0caa51_40a00591fe6a45e79606253dbfa60301~mv2.jpg/v1/fill/w_405,h_396,al_c,q_80,enc_auto/0caa51_40a00591fe6a45e79606253dbfa60301~mv2.jpg)
Note: This invitation link is valid for next 7 days.
Click on Accept invitation, it will redirect you to following window.
Now Set the new password for new user.
![](https://static.wixstatic.com/media/0caa51_cba6d77a788942f7856326734acdbfde~mv2.jpg/v1/fill/w_521,h_387,al_c,q_80,enc_auto/0caa51_cba6d77a788942f7856326734acdbfde~mv2.jpg)
Go back to IAM Identity Center console and go to User and click on the user
(New-admin user) we created.
![](https://static.wixstatic.com/media/0caa51_4fbb486eef44463f9eadc384a58fedcb~mv2.jpg/v1/fill/w_688,h_224,al_c,q_80,enc_auto/0caa51_4fbb486eef44463f9eadc384a58fedcb~mv2.jpg)
Step 6: Login as AdministratorAccess.
In the navigation pane, choose Dashboard.
On the Dashboard page, under Settings summary, copy the AWS access portal URL.
![](https://static.wixstatic.com/media/0caa51_c7675a3f2acc46668cd23c6c3d2d9c84~mv2.jpg/v1/fill/w_461,h_375,al_c,q_80,enc_auto/0caa51_c7675a3f2acc46668cd23c6c3d2d9c84~mv2.jpg)
Open a separate browser, paste the AWS access portal URL that you copied, and press Enter.
You can also login using Invitation link you received in step 5.
Step 7: Login using Username and password,
![](https://static.wixstatic.com/media/0caa51_c37b307014de4d119856ea9248ae898b~mv2.jpg/v1/fill/w_402,h_336,al_c,q_80,enc_auto/0caa51_c37b307014de4d119856ea9248ae898b~mv2.jpg)
![](https://static.wixstatic.com/media/0caa51_1284bb71517b411b845788ab9fe33de8~mv2.jpg/v1/fill/w_400,h_479,al_c,q_80,enc_auto/0caa51_1284bb71517b411b845788ab9fe33de8~mv2.jpg)
After you are signed in, an AWS account icon appears in the portal.
select the AWS account icon, the account name, account ID, and email address associated with the account appear.
Choose the name of the account to display the AdministratorAccess permission set and select the Management Console link to the right of AdministratorAccess.
![](https://static.wixstatic.com/media/0caa51_ac155eb25b134bda964e590b012379f2~mv2.jpg/v1/fill/w_627,h_198,al_c,q_80,enc_auto/0caa51_ac155eb25b134bda964e590b012379f2~mv2.jpg)
You will be redirected to the AWS Management Console.
![](https://static.wixstatic.com/media/0caa51_ff0bf9d0e6dc4f69973ebe19e78d0729~mv2.jpg/v1/fill/w_567,h_154,al_c,q_80,enc_auto/0caa51_ff0bf9d0e6dc4f69973ebe19e78d0729~mv2.jpg)
If you no longer need IAM Identity Centre, then Sign out and delete the IAM Identity Centre.
Step 8:Delete IAM Identity Centre
login as root again
Go to IAM Identity Centre dashboard,
Then Settings summary,
Go to setting,
Click on Management
Scroll down and press delete.
![](https://static.wixstatic.com/media/0caa51_89b38d97342641bcaec2fad474904fa0~mv2.jpg/v1/fill/w_426,h_342,al_c,q_80,enc_auto/0caa51_89b38d97342641bcaec2fad474904fa0~mv2.jpg)
![](https://static.wixstatic.com/media/0caa51_59aaa57a9fdb460db2e4e283d67d9715~mv2.jpg/v1/fill/w_424,h_374,al_c,q_80,enc_auto/0caa51_59aaa57a9fdb460db2e4e283d67d9715~mv2.jpg)
Tick mark all boxes and press confirm.
![](https://static.wixstatic.com/media/0caa51_6d8d9759a702413984084b5fe8530393~mv2.jpg/v1/fill/w_601,h_576,al_c,q_80,enc_auto/0caa51_6d8d9759a702413984084b5fe8530393~mv2.jpg)
Was this document helpful? How can we make this document better. Please provide your insights. You can download PDF version for reference.
For your aws certification needs or for aws learning contact us.
Good blog, just small changes that I specified are required.
Learned another way of how to create IAM user using the IAM identity center, good information, well explained.
Amazing blog got to learn something new
Easy to understand...