Delegating who can manage your AWS Managed Microsoft AD password policies - AWS Directory Service

Delegating who can manage your AWS Managed Microsoft AD password policies

You can delegate permissions to manage password policies to specific user accounts you created in your AWS Managed Microsoft AD by adding the accounts to the AWS Delegated Fine Grained Password Policy Administrators security group. When an account becomes a member of this group, the account has permissions to edit and configure any of the password policies listed previously.

To delegate who can manage password policies

  1. Launch Active Directory administrative center (ADAC) from any managed EC2 instance that you joined to your AWS Managed Microsoft AD domain.

  2. Switch to the Tree View and navigate to the AWS Delegated Groups OU. For more information about this OU, see What gets created with your AWS Managed Microsoft AD.

  3. Find the AWS Delegated Fine Grained Password Policy Administrators user group. Add any users or groups from your domain to this group.