# Assistant

Administrators manage their Shonin org by chatting with the **Assistant**, in the dashboard: people, groups, permission sets, assignments and delegations. Users who are not administrators do not see it.

## What to ask

```text
What accounts can I access?
List the users of my Shonin org
Create a permission set ReadOnly with arn:aws:iam::aws:policy/ReadOnlyAccess
Assign ReadOnly to the group developers on the account staging
Share the account staging with the Shonin org contoso
```

The Assistant answers in the language of your message. When you name people, it finds them among the people of your Shonin org; "me" is you. Before deleting someone or ending a delegation, it asks you to confirm.

**New conversation** starts over; otherwise your previous conversation continues.

## What it does not do

- It works only on your Shonin org, and never lists or names other Shonin orgs or their people.
- It never sees, chooses or sends passwords and codes.
- It does not connect an AWS organization, change **Org settings** or single sign-on, or set up an authenticator app: you do those in the portal.
- It has no access to AWS of its own: every request goes through Shonin, which checks it.

The Assistant runs real operations on your AWS accounts: read its answers before confirming changes.