Create IAM User

Create Admin Group

  1. Log in to the Console at the AWS Web Service page

  2. Click your account name in the top-right corner and choose Security Credentials

AWS IAM

If you don’t see the Security Credentials menu, click the search icon and type IAM.
Then select the IAM service to access its management console.

AWS IAM

  1. In the left navigation pane, choose User Groups, then select Create Group

AWS IAM

  1. Under Name the group, enter a name for the group (e.g., AdminGroup) and scroll down

AWS IAM

  1. In the Attach permissions policies section, search for AdministratorAccess and press Enter.
    From the results, select AdministratorAccess. Finally, choose Create Group.

AWS IAM

  1. The admin group has been created.

AWS IAM

Create Admin User

  1. In the left navigation pane, choose Users, then select Add User

AWS IAM

  1. On the Specify user details page, under User details, enter a username for the new user in the User name field. This will be their AWS login name. Example: AdminUser

  • Select Provide user access to the – AWS Management Console (optional). This option creates AWS Management Console login credentials for the new user.

  • You will be asked whether you want to provide console access to a person. AWS recommends creating users in IAM Identity Center instead of IAM.

  • To switch to creating a user in IAM Identity Center, choose Specify a user in Identity Center.

  • If IAM Identity Center is not enabled, selecting this option will redirect you to the service page so you can enable it. For details, see:
    https://docs.aws.amazon.com/singlesignon/latest/userguide/getting-started.html

  • If IAM Identity Center is already enabled, selecting this option will take you to the “Specify user details” page in the Identity Center. For more information, see:
    https://docs.aws.amazon.com/singlesignon/latest/userguide/addusers.html

  • If you cannot use IAM Identity Center, select I want to create an IAM user.

AWS IAM

  1. For Console password, choose one of the following:

  • Autogenerated password — The user receives a randomly generated password that meets the account password policy. You can view or download the password later.

  • Custom password — Assign a password by entering it manually.

  • (Optional) Users must create a new password at next sign-in (recommended) is selected by default to force the user to change their password upon first login.

  • Choose Next

AWS IAM

  1. On the Set permissions page, select how you want to assign permissions to the user. Choose one of the following three options:

  • Add user to group — Assign the user to one or more groups that already have permission policies attached. IAM displays a list of groups in your account along with their attached policies. You may also create a new group.

  • Copy permissions — Copy all group memberships, attached managed policies, inline policies, and permission boundaries from an existing user. Choose an existing user whose permissions match the needs of the new user.

  • Attach policies directly — View and attach AWS-managed or customer-managed policies directly to the user. You may also create a new policy. After creating it, return to this tab to attach it.

AWS IAM

  1. (Optional) On the Review and create page, under Tags, choose Add new tag to associate key–value metadata with the user.
  • Review all settings you have selected so far. When you are ready, choose Create user.

AWS IAM

  1. On the password retrieval page, obtain the assigned password for the user:

  • Select Show next to the password to display it and record it manually.

  • Select Download .csv to download the user’s credentials as a .csv file and store it securely.

  1. Verify the user has been created successfully.

AWS IAM

  1. Verify the user’s group membership.

AWS IAM

AWS IAM

  1. Copy the console sign-in link.

AWS IAM