organizations

Grants permission to send a response to the originator of a handshake agreeing to the action proposed by the handshake request

Grants permission to attach a policy to a root, an organizational unit, or an individual account

Grants permission to cancel a handshake

Grants permission to close an AWS account that is now a part of an Organizations, either created within the organization, or invited to join the organization

Grants permission to create an AWS account that is automatically a member of the organization with the credentials that made the request

Grants permission to create an AWS GovCloud (US) account

Grants permission to create an organization. The account with the credentials that calls the CreateOrganization operation automatically becomes the management account of the new organization

Grants permission to create an organizational unit (OU) within a root or parent OU

Grants permission to create a policy that you can attach to a root, an organizational unit (OU), or an individual AWS account

Grants permission to decline a handshake request. This sets the handshake state to DECLINED and effectively deactivates the request

Grants permission to delete the organization

Grants permission to delete an organizational unit from a root or another OU

Grants permission to delete a policy from your organization

Grants permission to delete a resource policy from your organization

Grants permission to deregister the specified member AWS account as a delegated administrator for the AWS service that is specified by ServicePrincipal

Grants permission to retrieve Organizations-related details about the specified account

Grants permission to retrieve the current status of an asynchronous request to create an account

Grants permission to retrieve the effective policy for an account

Grants permission to retrieve details about a previously requested handshake

Grants permission to retrieve details about the organization that the calling credentials belong to

Grants permission to retrieve details about an organizational unit (OU)

Grants permission to retrieve details about a policy

Grants permission to retrieve information about a resource policy

Grants permission to retrieve details about a previously responsibility transfer

Grants permission to detach a policy from a target root, organizational unit, or account

Grants permission to disable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations

Grants permission to disable an organization policy type in a root

Grants permission to start the process to enable all features in an organization, upgrading it from supporting only Consolidated Billing features

Grants permission to enable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations

Grants permission to enable a policy type in a root

Grants permission to send an invitation to another AWS account, asking it to join your organization as a member account

Grants permission to send an invitation to another AWS account, asking it to transfer a particular responsibility to your organization

Grants permission to remove a member account from its parent organization

Grants permission to list all of the accounts in the organization

Grants permission to list the accounts in an organization that are contained by a root or organizational unit (OU)

Grants permission to list accounts that have invalid effective policies for a specified policy type

Grants permission to retrieve the list of the AWS services for which you enabled integration with your organization

Grants permission to list all of the OUs or accounts that are contained in a parent OU or root

Grants permission to list the asynchronous account creation requests that are currently being tracked for the organization

Grants permission to list the AWS accounts that are designated as delegated administrators in this organization

Grants permission to list the AWS services for which the specified account is a delegated administrator in this organization

Grants permission to list validation errors found in the effective policy for a specific account and policy type

Grants permission to list all of the handshakes that are associated with an account

Grants permission to list the handshakes that are associated with the organization

Grants permission to list all responsibilities of a particular type transfered to your organization

Grants permission to list all of the organizational units (OUs) in a parent organizational unit or root

Grants permission to list all responsibilities of a particular type transfered to another organization

Grants permission to list the root or organizational units (OUs) that serve as the immediate parent of a child OU or account

Grants permission to list all of the policies in an organization

Grants permission to list all of the policies that are directly attached to a root, organizational unit (OU), or account

Grants permission to list all of the roots that are defined in the organization

Grants permission to list all tags for the specified resource

Grants permission to list all the roots, OUs, and accounts to which a policy is attached

Grants permission to move an account from its current root or OU to another parent root or OU

Grants permission to create or update a resource policy

Grants permission to register the specified member account to administer the Organizations features of the AWS service that is specified by ServicePrincipal

Grants permission to remove the specified account from the organization

Grants permission to add one or more tags to the specified resource

Grants permission to end the transfer for a responsibility to or from your organization

Grants permission to remove one or more tags from the specified resource

Grants permission to rename an organizational unit (OU)

Grants permission to update an existing policy with a new name, description, or content

Grants permission to rename a responsibility transfer to or from your organization