AWS - IAM 用户角色权限未传播给用户

Question

My IAM user is not getting the permissions his user-group/role provide. I would like to introduce my problem through series of screenshots. Not sure this is the best way but thought it would be helpful. I have the following IAM User I created:

, as you can see assigned to group Administrators. Administrators has the following role policy:

, the AdminRolePolicy:

, as you can see is assigned the role admin, and the admin role has the following permissions (trust me the top of this page was IAM->Roles->admin):

When I login as this user, and go to IAM, I get the following series of messages:

Notice each one says "ask Administrator to add permissions". However, this user has AdministratorAccess, and I assume should therefore already have all these permissions. I am not sure how to diagnose my problem or how to address to fix. I would be grateful for any suggestions. Thanks

Answer 1

This policy allows the group members to assume the admin role. This means you have to assume this role before doing any admin action.

If you want the user to have admin privilege, you need to add the policy AdministratorAccess directly in the user or group.

Documentation how to assume a role from the AWS console