Viewing details of the root with Amazon Organizations - Amazon Organizations
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Viewing details of the root with Amazon Organizations

When you sign in to the organization's management account in the Amazon Organizations console, you can view details of the administrative root.

Minimum permissions

To view the details of root, you must have the following permissions:

  • organizations:DescribeOrganization (console only)

  • organizations:ListRoots

The root is the topmost container in the hierarchy of organizational units (OUs) and generally behaves as an OU. However, as the container at the very top of the hierarchy, changes to the root affect every other OU and every Amazon Web Services account in the organization.

Amazon Web Services Management Console
To view the details of the root
  1. Sign in to the Amazon Organizations console. You must sign in as an IAM user, assume an IAM role, or sign in as the root user (not recommended) in the organization’s management account.

  2. Navigate to the Amazon Web Services accounts page, and choose the Root OU (its name, not the radio button).

  3. The Root details page appears and displays the details of the root.

Amazon CLI & Amazon SDKs
To view the details of the root

You can use one of the following commands to view details of a root:

  • Amazon CLI: list-roots

    The following example shows how to retrieve the details of the root, including which policy types are currently enabled in the organization:

    $ aws organizations list-roots { "Roots": [ { "Id": "r-a1b2", "Arn": "arn:aws-cn:organizations::123456789012:root/o-aa111bb222/r-a1b2", "Name": "Root", "PolicyTypes": [ { "Type": "BACKUP_POLICY", "Status": "ENABLED" } ] } ] }
  • Amazon SDKs: ListRoots