title: I am trying to set-up MFA for an AWS user in the organization
body: <pre><code>       {
    "Version": "2012-10-17",
    "Statement": [
      {
        "Sid": "Stmt1506369084151",
        "Action": [
          "iam:CreateVirtualMFADevice",
          "iam:EnableMFADevice",
          "iam:ListMFADevices",
          "iam:ResyncMFADevice"
        ],
        "Effect": "Allow",
        "Resource": "arn:aws:iam::account_#:user/user_name"
      }
    ]
  }
  </code></pre>
  
  <p>I have this above policy which should enable users to set-up MFA by themselves. 
  However, when I test this policy (by logging in as one of the users, I am not able to perform the desired action)</p>
  
  <p>What am I missing in the policy snippet?</p>
  
  <p>PS: The policy is attached to the user I try to log-in as. So this silly mistake is ruled out. </p>