

# Managing accounts and preferences
<a name="viewing-accounts"></a>

The Accounts page of the Compute Optimizer console lists the recommendation preferences that are activated for the account or organization, such as [enhanced infrastructure metrics]().

For the management account of an organization, the Accounts page also lists your organization's member accounts and their opt-in status to Compute Optimizer. Management accounts can [opt in](getting-started.md) member accounts of the organization to AWS Compute Optimizer. When a member account is opted in, Compute Optimizer analyzes the member account's supported resources for potential optimization.

**Topics**
+ [Viewing the status of an organization's member accounts](view-account-opt-in.md)
+ [Delegating an administrator account](delegate-administrator-account.md)

# Viewing the status of an organization's member accounts
<a name="view-account-opt-in"></a>

This section provides you with instructions on how to view member accounts of an organization that are opted in to Compute Optimizer.

**Note**  
This option is only available to the account manager or delegated administrator of an organization who opted in member accounts to Compute Optimizer.

## Prerequisites
<a name="view-account-prerequisites"></a>

The following procedure assumes that you have already completed the [Opting in to AWS Compute Optimizer](account-opt-in.md) procedure.

## Procedure
<a name="view-account-process"></a>

1. Open the Compute Optimizer console at [https://console.aws.amazon.com/compute-optimizer/](https://console.aws.amazon.com/compute-optimizer/).

1. Choose **Account management** in the navigation pane.

   The **Account management** page lists the member accounts of the organization and their current Compute Optimizer opt-in status. The **Opt-in status** and **Status description** columns describe the status of each account ID that are listed. To delegate an administrator account, see [Delegating an administrator account](delegate-administrator-account.md).  
![\[Accounts page in the Compute Optimizer console\]](http://docs.aws.amazon.com/compute-optimizer/latest/ug/images/accounts-page.png)

## Additional resources
<a name="view-account-resources"></a>
+ [Delegating an administrator account](delegate-administrator-account.md)
+ [Opting in to AWS Compute Optimizer](account-opt-in.md)

# Delegating an administrator account
<a name="delegate-administrator-account"></a>

You can delegate a member account in your organization as an administrator for Compute Optimizer. A delegated administrator can access and manage Compute Optimizer recommendations. A delegated administrator can also set recommendation preferences for your entire organization without the need to access the management account. The management account controls the delegated administrator option for its organization. Each organization can only have one delegated administrator for Compute Optimizer at a time.

The delegated administrator can get and export recommendations, set recommendation preferences, set member account opt-in status, and get projected utilization metrics.

**Note**  
You can limit your delegated administrator’s access to Compute Optimizer actions by setting up appropriate IAM permissions in your IAM policy. For more information, see [Policies and permissions in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/PoliciesOverview.html).
If you're the delegated administrator and you want to view org-level recommendations, see [ Policies to grant access to Compute Optimizer for a management account of an organization](https://docs.aws.amazon.com//compute-optimizer/latest/ug/security-iam.html#organization-account-access).

## Procedure
<a name="da-process"></a>

Use the following procedures to register, update, or deregister an account as a delegated administrator. You can do this using the Compute Optimizer console or the AWS CLI.

### Registering or updating a delegated administrator
<a name="register-da"></a>

------
#### [ Console ]

**To register or update an account as a delegated administrator**

1. Open the Compute Optimizer console at [https://console.aws.amazon.com/compute-optimizer/](https://console.aws.amazon.com/compute-optimizer/).

1. Choose **Account management** in the navigation pane.

1. In the **Organization opt-in by account** section, choose the account ID that you want to add as the delegated administrator.

1. For **Delegate**, choose **Register as delegated administrator**.

1. In the prompt that appears, choose **Confirm** if you agree to the change and to add the delegated administrator.

------
#### [ CLI ]

**To register or update an account as a delegated administrator**

1. Log in as the management account of your organization.

1. Open a terminal or command prompt window.

1. Call the following API operation. Replace *123456789012* with your account ID.

   ```
   aws organizations register-delegated-administrator \
                                           --account-id 123456789012 \
                                           --service-principal compute-optimizer.amazonaws.com
   ```

------

### Deregistering a delegated administrator
<a name="deregister-da"></a>

------
#### [ Console ]

**To deregister a member account as a delegated administrator**

1. Open the Compute Optimizer console at [https://console.aws.amazon.com/compute-optimizer/](https://console.aws.amazon.com/compute-optimizer/).

1. Choose **Account management** in the navigation pane.

1. In the **Organization opt-in by account** section, choose the current delegated administrator's account ID.

1. For **Delegate**, choose **Deregister as delegated administrator**.

1. In the prompt that appears, choose **Confirm** if you agree to the change and to remove the delegated administrator.

------
#### [ CLI ]

**To deregister a member account as a delegated administrator**

1. Log in as the management account of your organization.

1. Open a terminal or command prompt window.

1. Call the following API operation. Replace *123456789012* with your account ID.

   ```
   aws organizations deregister-delegated-administrator \ 
                                           --account-id 123456789012 \
                                           --service-principal compute-optimizer.amazonaws.com
   ```

------

## Additional resources
<a name="da-resources"></a>
+ [Viewing the status of an organization's member accounts](view-account-opt-in.md)