Organization Admin Guide

Initial Setup

Organization Configuration

1. Set up AWS Identity Center integration

   You can use Identity Center (IDC) or Amazon Bio Discovery directly to manage access:

   • Navigate to the menu on the left and select "Team members" to add or remove groups and individual team members.
   • Add existing users and groups to the current Amazon Bio Discovery instance from your Identity Center directory.
   • Manage Identity Center directory
2. Configure organization settings and policies
3. Establish billing and cost management
4. Define user roles and permissions

User Management

Manage users and groups within your organization:

• Add Users: Invite users from your Identity Center directory
• Assign Roles: Set appropriate permission levels
• Manage Groups: Create and manage user groups
• Monitor Usage: Track user activity and resource consumption

Permission Management

A given user's permissions default to the most permissive role they have access to, whether through an individual user role or a role granted to a group they are a member of.

Role Types

• Admin: Full system access and user management
• Project Owner: Create and manage projects and resources
• Viewer: Read-only access to shared resources

Resource Permissions

Control access to projects, recipes, and experiments:

• Set default organization-wide permissions
• Configure project-level access controls
• Manage recipe sharing and publishing
• Control wet lab integration access

Cost Management

Billing Setup

1. Configure AWS billing integration
2. Set up cost allocation tags
3. Establish budget alerts and limits
4. Configure usage reporting

Usage Monitoring

Security & Compliance

Data Protection

• Configure data encryption settings
• Set up data retention policies
• Manage data export and sharing controls
• Implement audit logging

Compliance Requirements

System Administration

Organization Settings

• Configure default project templates
• Set up organization-wide recipe libraries
• Manage system notifications and alerts
• Configure integration with external systems

Monitoring & Maintenance

• Monitor system health and performance
• Review usage patterns and optimization opportunities
• Manage system updates and maintenance windows
• Handle user support requests

Best Practices

User Onboarding

1. Create standardized onboarding documentation
2. Provide training sessions for new users
3. Set up example projects and templates
4. Establish support channels and escalation procedures

Governance

Troubleshooting

Common Admin Issues

• User Access Problems: Check Identity Center sync and permissions
• Billing Discrepancies: Review usage reports and cost allocation
• Performance Issues: Monitor resource utilization and scaling
• Integration Failures: Verify external system connectivity

Service Improvement and How to Opt Out

Amazon Bio Discovery may use and store customer content for service improvement, such as fixing operational issues, evaluating service performance, debugging, or model training. For more details on the redaction process we follow prior to using your content for service improvement, see here.

Opting out is done by applying an AWS Organizations AI services opt-out policy. This policy must be created and attached from your AWS organization's management account, so it requires an administrator with management account access and permission to manage Organizations policies. If you do not have this access, contact your organization's administrator to request it. You can opt out of Amazon Bio Discovery specifically, or of all supported AWS AI services. For step-by-step instructions, see AI services opt-out policies in the AWS Organizations User Guide.