Subscribe users to Amazon Q Developer Pro in a member account

Prerequisites Step 1: Install the Amazon Q Developer Pro profile and subscribe the first user Step 2: Subscribe other users Step 3: Enable identity-enhanced console sessions What resources were created?

A member account is an AWS account, other than the management account, that is part of an organization managed by AWS Organizations.

If you are the owner of a member account, use the following instructions to subscribe users to Amazon Q Developer Pro in your account.

Not sure whether to subscribe users in a member or management account? See Step 1: Choose a deployment option for help.

For more information about organizations, member accounts, and management accounts, see Terminology and concepts for AWS Organizations in the AWS Organizations User Guide.

Before you begin, make sure that:

You have a member AWS account.
You have the minimum permissions required to subscribe users and manage Amazon Q Developer settings. For more information, see Allow administrators to use the Amazon Q console, and Allow administrators to use the Amazon Q Developer console.
(Optional) You have an organization instance of IAM Identity Center set up in the management account or an account instance of IAM Identity Center set up in your member account. This IAM Identity Center intance contains the identities of the users you want to subscribe to Amazon Q Developer Pro, and must be deployed in a supported AWS Region, as described in IAM Identity Center Regions supported by Amazon Q Developer. If you don't have an IAM Identity Center instance installed, that's ok. One will be installed in your member account when you subscribe the first user. For more information about IAM Identity Center, see Organization and account instances of IAM Identity Center in the AWS IAM Identity Center User Guide.

Sign in to the AWS Management Console using your member AWS account.
Switch to the Amazon Q Developer console.
Make sure you're in the AWS Region where you want to install the Amazon Q Developer profile and where you want to store user data. For supported Regions, see Supported Regions for the Q Developer console and Q Developer profile.
Choose the Get started button.

Note
If you see a Settings button instead of Get started button, it means that you've already run through the 'Get started' workflow and can skip to Step 2: Subscribe other users.
Follow the on-screen prompts to subscribe your first user.
- If the first user's email address matches one in an existing IAM Identity Center in either your member account or a management account, then Amazon Q connects to that IAM Identity Center.
- If the first user's email address doesn't match one in an existing IAM Identity Center, then Amazon Q creates an IAM Identity Center account instance in your member account, and adds the first user to it. Note that:
  - Amazon Q only creates an IAM Identity Center account instance if there is no IAM Identity Center already in your member account.
  - Otherwise, if there is an IAM Identity Center account instance in your member account, but the user is not in it, then Amazon Q creates the user in the existing IAM Identity Center.
The Create Amazon Q Developer profile dialog box appears.
Review the contents of the dialog box and provide a name for your profile in Profile name. For help with cross-region inferencing, see Cross-region processing in Amazon Q Developer. For help with disabling dashboard metrics, see Disabling the Amazon Q Developer dashboard.

Choose Create application.

The Amazon Q Developer profile and managed application are installed, and the first user is subscribed.
(Optional) Verify that the first user's subscription was created:
1. In the Amazon Q Developer console, in the navigation pane, choose Subscriptions.
2. In the main pane, choose the Users tab.
The subscription of the first user should appear in the list in the Pending state. If not, refresh your browser tab.

Note
The subscription will change to the Active state after the user's first use of Amazon Q Developer features.
Have the first user check their email. They should receive an email titled Activate Your Amazon Q Developer Pro Subscription within 24 hours. In this email, users will find guidance on how to begin using their Amazon Q Developer Pro license in the AWS Management Console and their Integrated Development Environment (IDE). The email includes users' unique Start URL and AWS Region for authentication, and provides quickstart steps for using Amazon Q Developer in their IDE. This email streamlines the onboarding process and saves you valuable time by eliminating the need for you to manually notify each new user.

To subscribe other users, add them to your IAM Identity Center instance if they're not already there, and then subscribe them to Amazon Q Developer Pro by choosing Subscribe in the Amazon Q Developer console.

For instructions on adding users to IAM Identity Center, see Add users to your IAM Identity Center directory in the AWS IAM Identity Center User Guide.

If you want to allow users to use their Amazon Q Developer Pro subscription in the AWS Management Console, and on AWS apps and websites, enable identity-enhanced console sessions. For more information, see Enabling identity-enhanced console sessions in the AWS IAM Identity Center User Guide.

If you don't enable identity-enhanced console sessions, users can still use Amazon Q in the AWS Management Console, and on AWS apps and websites, but they'll be limited to the Free tier.

Note

The ability to enable identity-enhanced console sessions—and therefore the ability to use Amazon Q Developer Pro subscriptions in the AWS Management Console, and on AWS apps and websites—is only supported with organization instances of IAM Identity Center, not account instances.

When you subscribed users in your member account, Amazon Q created the following AWS resources on your behalf:

An account instance of IAM Identity Center. This instance is only created if the first user you subscribed wasn't found in an existing IAM Identity Center in the member account or management account. For more information about account instances of IAM Identity Center, see Account instances of IAM Identity Center in the AWS IAM Identity Center User Guide.

Note
Account instances of IAM Identity Center have limitations. For example, account instances don't support console access. (Users can still use Amazon Q in the console, it's just that they'll be subject to the Free tier monthly limits.) If you want your users to be able to use Amazon Q Developer Pro in the console and other AWS websites, they must exist in an organization instance of IAM Identity Center, in a management account. For more information, see Subscribe users to Amazon Q Developer Pro in a management account.

Note
You can't convert or merge an account instance of IAM Identity Center into an organization instance.
The first user, in IAM Identity Center. (You might have added team members too.)
Pro tier subscriptions for the first user and other users, in Amazon Q Developer.
An Amazon Q Developer profile, in the Amazon Q Developer console, under Settings.
A managed application called QDefaultProfile, in IAM Identity Center. The application is associated with the Amazon Q Developer profile. Like the Amazon Q Developer profile, the application is created once and shared between all Amazon Q Developer Pro subscribers in your member account.

Note
Amazon Q can create the QDefaultProfile managed application in a maximum of 10 AWS accounts per AWS Region within an organization.

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

In a management account

Pro tier subscriptions