# AWS adds centralized assignment of existing IAM roles to workforce users

_Published Thursday, November 5, 2026 at 2:35 PM EST · Security · Latest · Tier 2 — Notable_

![AWS adds centralized assignment of existing IAM roles to workforce users — Primary](https://d2908q01vomqb2.cloudfront.net/22d200f8670dbdb3e253a90eee5098477c95c23d/2026/05/13/AdobeStock_1376596821-1260x630.jpeg)

AWS has introduced account access manager, which lets administrators centrally assign existing AWS account roles to workforce users and groups through IAM Identity Center. AWS says the feature preserves custom role permissions and trust policies while carrying individual user identity into shared role sessions, allowing actions to be attributed to specific people.

Administrators can manage assignments through the console, APIs and infrastructure automation tools. The feature is available at no additional cost in Commercial Regions, excluding opt-in Regions; GovCloud, China and other non-commercial Regions are excluded. Adoption requires an organization instance of IAM Identity Center and updates to each eligible role's trust policy.

## Sources

- [AWS Security Blog](https://aws.amazon.com/blogs/security/introducing-aws-account-access-manager-iam-role-flexibility-with-centralized-workforce-access/)

---
Canonical: https://techandbusiness.org/newswire/c-y2Ei7Q2pzIqSp0zm-rG6
Published: 2026-11-05T19:35:00.799Z
Story chronology: 2026-11-05T19:21:56.000Z
Retrieved: 2026-11-06T23:13:18.208Z
Publisher: Tech & Business (techandbusiness.org)