Manage access

Share accounts with another company

The Shonin org that owns an AWS organization can delegate single accounts to another Shonin org: a partner, a supplier or a customer. They assign their own permission sets on those accounts, to their own people, and see nothing else of yours. The other Shonin org needs no AWS organization, and can belong to another AWS organization.

#Delegate accounts

Ask the Assistant, naming the other Shonin org and the accounts:
```
Share the account staging with the Shonin org contoso
```
Shonin emails the administrators of your Shonin org: one of them confirms the delegation from the link (Confirm or Cancel). The link expires in 7 days, and nothing is shared until someone confirms.
The administrators of the other Shonin org get an invitation by email. Signed in to their Shonin org, they choose Accept or Refuse.
Once they accept, they assign their own permission sets on the delegated accounts. Their roles are named shonin-<their Shonin org>-<permission set>.

#Rules

Only owners delegate, and only accounts of their own AWS organization.
Delegated accounts cannot be delegated again.
The other Shonin org decides who opens which permission set on the accounts you delegated, and which policies those permission sets have. Choose the accounts accordingly: whoever gets an administrator permission set on an account is an administrator of that account. See FAQ.

#Follow and end a delegation

Ask the Assistant to list the delegations of your Shonin org: awaiting confirmation, pending, accepted, refused, cancelled or expired. It can cancel a delegation not accepted yet.

Ending an accepted delegation removes the accounts from the other Shonin org, and every permission set it assigned there. It takes a few minutes, and the Assistant asks you to confirm first.

#Receive accounts

Accounts delegated to your Shonin org appear in the panel AWS organization, under Accounts delegated to you, with the Shonin org that delegated them. Assign permission sets on them like on your own accounts: see Permission sets and assignments.