You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There's been a recent change in the SSO admin API, wherein using specific IAM permisisons, you could now programmatically create/delete account assignments for org main/delegated admin account.
The solution currently excludes provisioning to org main/delegated admin account as the earlier version of SSO admin API did not allow this.
However, using the following permissions policy, provisioning lambda can now successfully assign/remove account assignment to org main / delegated admin account
The solution should now programmatically switch the permissions it uses to provision based on the target account it's provisioning the account assignment to
Update docs to remove this limitation
The text was updated successfully, but these errors were encountered:
AC:
The text was updated successfully, but these errors were encountered: