This recipe assumes you already have two AWS accounts created and ready to go.
In one account (the source account, referred to as account A) you will need an IAM user.
While you will need to use your account's root credentials to set up the first role in an account, do not use them on a day-to-day basis. The root account has permissions to do anything in your account, and should only be used when necessary.