Manage access

Assistant

Administrators manage their Shonin org by chatting with the Assistant, in the dashboard: people, groups, permission sets, assignments and delegations. Users who are not administrators do not see it.

#What to ask

What accounts can I access?
List the users of my Shonin org
Create a permission set ReadOnly with arn:aws:iam::aws:policy/ReadOnlyAccess
Assign ReadOnly to the group developers on the account staging
Share the account staging with the Shonin org contoso

The Assistant answers in the language of your message. When you name people, it finds them among the people of your Shonin org; "me" is you. Before deleting someone or ending a delegation, it asks you to confirm.

New conversation starts over; otherwise your previous conversation continues.

#What it does not do

• It works only on your Shonin org, and never lists or names other Shonin orgs or their people.
• It never sees, chooses or sends passwords and codes.
• It does not connect an AWS organization, change Org settings or single sign-on, or set up an authenticator app: you do those in the portal.
• It has no access to AWS of its own: every request goes through Shonin, which checks it.

The Assistant runs real operations on your AWS accounts: read its answers before confirming changes.