# Create account

Create a new account into the organization.

## Usage

```bash
tkm org accounts create \
  --name <account name> \
  --email <account email> \
  [--iam-user-access-to-billing <IAM user access to billing>] \
  [--role-name <account admin role> ] \
  [--alias <account alias>] \
  [--ou <organizational unit>] \
  [--config-file <path to account config file>]
```

## Positional arguments

This command has no positional arguments.

## Options

In addition to the [common options](https://docs.takomo.io/command-line-usage/common-options), this command has the following options.

* `--name <name>`
  * The friendly name of the member account.
  * Required.
* `--email <email>`
  * The email address of the owner to assign to the new member account. This email address must not already be associated with another AWS account. You must use a valid email address to complete account creation. You can't access the root user of the account or remove an account that was created with an invalid email address.
  * Required.
* `--iam-user-access-to-billing <boolean>`
  * If set to true, the new account enables IAM users to access account billing information if they have the required permissions. Otherwise, only the root user of the new account can access account billing information.&#x20;
  * Optional, defaults to true.
* `--role-name <role>`
  * The name of an IAM role that AWS Organizations automatically preconfigures in the new member account. This role trusts the master account, allowing users in the master account to assume the role, as permitted by the master account administrator. The role has administrator permissions in the new member account.
  * Optional, defaults to OrganizationAccountAccessRole.
* `--alias <alias>`
  * The account alias to create.
  * Optional.
* `--ou <ou>`
  * Path to the organizational unit where the account should be added.
  * Optional, defaults to Root.
* `--config-file <file>`
  * Path to a file containing account specific configuration.
  * Optional.

## IAM permissions

These are the minimum IAM permissions required to run this command.

```yaml
Statement:
  - Effect: Allow
    Action:
      - organizations:DescribeOrganization
      - organizations:CreateAccount
      - organizations:DescribeCreateAccountStatus
      - organizations:ListRoots
      - organizations:ListTargetsForPolicy
      - organizations:ListAWSServiceAccessForOrganization
      - organizations:DescribePolicy
      - organizations:ListPolicies
      - organizations:ListAccountsForParent
      - organizations:ListAccounts
      - organizations:DescribeOrganization
      - organizations:ListOrganizationalUnitsForParent
      - organizations:MoveAccount
    Resource: "*"
```

## Examples

Create a new account with email **<hello@example.com>** and name **example**.

```bash
tkm org accounts create \
  --email hello@example.com \
  --name example
```

Create a new account to organiational unit Root/Examples.

```bash
tkm org accounts create \
  --email hello@example.com \
  --name example \
  --ou Root/Examples
```


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://organizations.takomo.io/command-line-usage/account/create-account.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
