AWS Security ChangesHomeSearch

AWS mpa documentation change

Service: mpa · 2025-08-10 · Documentation low

File: mpa/latest/userguide/create-team.md

Summary

Updated required permissions list by reorganizing SSO and Organizations service requirements

Security assessment

Changes to permission prerequisites for team creation are administrative updates without security implications.

Diff

diff --git a/mpa/latest/userguide/create-team.md b/mpa/latest/userguide/create-team.md
index e37c6820a..30170f467 100644
--- a//mpa/latest/userguide/create-team.md
+++ b//mpa/latest/userguide/create-team.md
@@ -30 +30 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso:DescribeInstance`
+  * `organizations:DescribeOrganization`
@@ -32 +32 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso:GetSharedSsoConfiguration`
+  * `organizations:ListDelegatedAdministrators`
@@ -34 +34 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso-directory:DescribeUsers`
+  * `sso:DescribeInstance`
@@ -36 +36 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso-directory:SearchUsers`
+  * `sso:GetSharedSsoConfiguration`
@@ -40 +40 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `organizations:ListDelegatedAdministrators`
+  * `sso-directory:DescribeUsers`
@@ -42 +42 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `organizations:DescribeOrganization`
+  * `sso-directory:SearchUsers`