aws iam enable-organizations-root-sessions

Allows the management account or delegated administrator to perform privileged tasks on member accounts in your organization. AWS CLI reference