Reference: API operations by account - Amazon Organizations
Operations you can call from only the organization's management accountOperations you can call from only the organization's management account or a member account designated as a delegated administratorOperations you can call from only a member account in the organizationOperations you can call from any account in the organization
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Reference: API operations by account

This page lists all Amazon Organizations API operations, grouped by the account that can call them. Choose any API operation to learn more about using it.

Operations you can call from only the organization's management account

Operations you can call from only the organization's management account or a member account designated as a delegated administrator

Operations you can call from only a member account in the organization

Operations you can call from any account in the organization

These operations can be called from any account in the organization.