A role is assigned a specific set of tasks and permissions. Users may assume a
different role than the one they have in order to perform a different set of tasks. For
example, the primary administrator is unavailable and the backup administrator is asked
to assume the role of the primary administrator during his or her absence.
A few
points to consider before assuming a role:
- A role must first be set up by an administrator.
- You must log in as an IAM user, not as an account root user.
- Once you assume another role, you temporarily give up your existing user
permissions and assume the permissions of your new role.
- When you are no longer assuming another role, your usual user permissions
are automatically restored.