How can I grant access to Cost Explorer for an IAM user with a member account of an AWS Organizations?

Resolution

Follow these instructions to allow IAM users for an Organizations member account to access Cost Explorer.

1.    Using the Organizations management account, turn on Cost Explorer access for all your organization accounts by following the instructions for Controlling member accounts' access using Cost Explorer preferences.

Note: You can't grant access to individual member accounts. All member accounts in your organization are granted access. Member account owners can't view Cost Explorer information for other accounts in your organization.

2.    Follow the instructions for Activating access to the AWS Billing console.

Note: Only the root user of an account can access the Billing and Cost Management console until this step is completed.

3.    Attach an IAM policy to the IAM user to allow access to Cost Explorer information. For example policies, see AWS Billing policy examples.

Related information

Best practices for the management account

Best practices for member accounts

Managing the AWS accounts in your organization

AWS Organizations terminology and concepts