# Getting started

From a new Shonin org to the first person opening the AWS console, in four steps.

## 1. Create your Shonin org

Open https://app.shonin.ai, choose a name for your Shonin org and enter your email. Shonin is invite-only for now: you need an invite code. You get an email to verify your address and create your account; you are the first administrator, and a primary admin (see [Second factor](second-factor.md)).

The name of your Shonin org is also its address: `https://<your Shonin org>.app.shonin.ai`.

## 2. Connect your AWS organization

An administrator of your AWS management account deploys the Shonin installation with one click, then you enter the code it shows in Shonin. See [Connect your AWS organization](connect-aws-organization.md).

You can skip this step if your Shonin org only uses accounts that another company shares with it: see [Share accounts with another company](share-accounts.md).

## 3. Give people access

In the dashboard, ask the **Assistant** to invite people and to assign permission sets, for example:

```text
Invite alice@acme.example, Alice Smith, as an administrator
Create a permission set ReadOnly with arn:aws:iam::aws:policy/ReadOnlyAccess
Assign ReadOnly to alice@acme.example on the account production
```

See [People and groups](people-and-groups.md) and [Permission sets and assignments](permission-sets.md).

People see the accounts and permission sets assigned to them in **Console access**, with **Open console** and **Access keys** ([Console access](console-access.md)), and can use them from a terminal with the `shonin` command ([Command line and SDKs](command-line.md)).

## 4. Share accounts with another company

The Shonin org that connected an AWS organization can delegate single accounts to another Shonin org, which then assigns its own permission sets on them. See [Share accounts with another company](share-accounts.md).

## Next

- [Single sign-on with Google Workspace](single-sign-on-google-workspace.md), so your people sign in with their company account.
- [Second factor](second-factor.md): set up an authenticator app.