Develop an IAM user and a cross-account role within the management account, ensuring the cross-account role is configured with the minimum necessary permissions to interact with the member accounts.

Establish an IAM user in each member account, and within the management account, devise a cross-account role with restricted access. Utilize a trust policy to allow the IAM users to assume this role.

Generate an IAM user in the management account, and in the member accounts, set up an IAM group with limited permissions. Include the IAM user from the management account in each of these IAM groups.

Forge an IAM user in the management account, and within the member accounts, craft cross-account roles with minimal access rights. Employ a trust policy to enable the IAM user to assume these roles.