Skip to content ![](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20300%20141'%3E%3C/svg%3E)
- Go to IAM dashboard.
- Select Users menu from the left hand side menu.
- Select the user you want to provide the permission.
- Select the permissions tab and click on Add Permissions button.
- Click Create Policy link.
![](data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%201024%20333%22%3E%3C/svg%3E)
- On Create Policy page, select the following things:
- Select IAM service.
- In Access Level Write, select CreateRole
- In Resources, select Specific Resource and select Any in this account checkbox
![](data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%201024%20775%22%3E%3C/svg%3E)
![](data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%201024%20593%22%3E%3C/svg%3E)
- Click Next, to review poilcy.
- In the name field enter IAMCreateRole.
- Click Create Policy button.
- Next page will give you a success message that the polciy has been created.
![](data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%201024%20513%22%3E%3C/svg%3E)
- Go back to the 3rd step (Select the user you want to provide the permission) and click Next: Permissions button .
- In the Set permissions section, click Attach existing policies directly tab.
- Check the IAMCreateRole policy.
![](data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%201024%20471%22%3E%3C/svg%3E)
- Click next to attach IAMCreateRole policy to the user.
- The user should be able to see the create the policy now.