# Managing delegated administrator views for an organization
<a name="delegated-administrator-organizational-view"></a>

With AWS Health, you can leverage the delegated administrator feature from AWS Organizations that allows an account other than the management account to view aggregated AWS Health events on the [AWS Health Dashboard](https://aws.amazon.com/premiumsupport/technology/aws-health-dashboard) or programmatically through the [AWS Health API](https://docs.aws.amazon.com/health/latest/ug/health-api.html). The delegated administrator feature provides the flexibility for different teams to view and manage health events across your organization. It's an AWS security best practice to delegate responsibilities outside of the management account where possible.

**Contents**
+ [Registering a delegated administrator for your organizational view](register-a-delegated-administrator.md)
+ [Removing a delegated administrator from your organizational view](remove-a-delegated-administrator.md)

# Registering a delegated administrator for your organizational view
<a name="register-a-delegated-administrator"></a>

After you enable organizational view for your organization, you can register up to five member accounts in your organization as a delegated administrator. To do this, call the [RegisterDelegatedAdministrator](https://docs.aws.amazon.com/organizations/latest/APIReference/API_RegisterDelegatedAdministrator.html) API operation. After you register the member accounts, they are a delegated administrator account and can access the AWS Health organizational view from the AWS Health Dashboard. If the account has a [Business](https://aws.amazon.com/premiumsupport/plans/business/), [Enterprise On-Ramp](https://aws.amazon.com/premiumsupport/plans/enterprise-onramp), or [Enterprise](https://aws.amazon.com/premiumsupport/plans/enterprise) Support plan, then the delegated administrators can use the AWS Health API to access the AWS Health organizational view.

To establish a delegated administrator, from the management account in your organization, call the following AWS Command Line Interface (AWS CLI) command. You can use this command from the management account or from an account that can assume the role with the required AWS Identity and Access Management permissions. In the following example command, replace **ACCOUNT\$1ID** with the member account ID that you want to register along with the AWS Health service principal "health.amazonaws.com".

```
aws organizations register-delegated-administrator --account-id ACCOUNT_ID --service-principal  health.amazonaws.com
```

After a delegated administrator is registered, you have visibility into all AWS Health events affecting accounts across your organization. You can view historical events over the past 90 days or since the organizational view feature was first enabled, whichever is more recent. Note that enabling the delegated administrator feature is an asynchronous process and takes up to a minute to complete.

# Removing a delegated administrator from your organizational view
<a name="remove-a-delegated-administrator"></a>

To remove access for a delegated administrator, call the [DeregisterDelegatedAdministrator](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeregisterDelegatedAdministrator.html) API operation.

From your organization's management account, call the following AWS CLI command to remove a member account as delegated administrator. In the following example command, replace **ACCOUNT\$1ID** with the member account ID that you want to remove.

```
aws organizations deregister-delegated-administrator --account-id ACCOUNT_ID --service-principal  health.amazonaws.com 
```