How do I allow an IAM user to view my account's billing information?

Last updated: 2021-11-12

I want to grant an AWS Identity and Access Management (IAM) user or group the permissions needed to access my account's billing information.


You can allow an IAM user to view your billing information by completing the following steps:

  1. Activate access to billing information for IAM users by following the instructions for Activating access to the AWS Billing console.
    Note: Until this step is completed, only the root user of an account can access the Billing and Cost Management console.
  2. Update the IAM policy for the user or group to allow access to billing information. For example policies, see Using identity-based policies (IAM policies) for Billing. If you created a new policy, then attach the policy to the user or group. For more information, see Managing IAM policies.

Note: The AWS Policy Generator can help you generate a policy that fits your use case, but be sure that you understand the fundamentals of IAM. For more information on billing permissions, see AWS Billing actions policies. For a general explanation of how IAM works, see What is IAM?