organizations:RegisterDelegatedAdministrator

Write

organizations:RegisterDelegatedAdministrator is a Write access-level action in the organizations service. Grants permission to register the specified member account to administer the Organizations features of the AWS service that is specified by ServicePrincipal

Resource types

ARNs that organizations:RegisterDelegatedAdministrator can be scoped to in an IAM policy.

arn:${Partition}:organizations::${Account}:account/o-${OrganizationId}/${AccountId}
account

Condition keys

Keys you can use in the Condition block of a policy that grants organizations:RegisterDelegatedAdministrator.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Example IAM policy

A minimal policy that allows organizations:RegisterDelegatedAdministrator. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowOrganizationsRegisterDelegatedAdministrator",
      "Effect": "Allow",
      "Action": "organizations:RegisterDelegatedAdministrator",
      "Resource": "*"
    }
  ]
}

Related actions in organizations

organizations:AcceptHandshake Write organizations:AttachPolicy Write organizations:CancelHandshake Write organizations:CloseAccount Write organizations:CreateAccount Write organizations:CreateGovCloudAccount Write organizations:CreateOrganization Write organizations:CreateOrganizationalUnit Write organizations:CreatePolicy Write organizations:DeclineHandshake Write organizations:DeleteOrganization Write organizations:DeleteOrganizationalUnit Write

View all organizations actions →