Manage user access (Beta)
Read this page to learn how to manage user access with Identity and Access in Cloud Manager.
UPDATE NEEDED
Currently, Identity and Access in Cloud Manager is natively enabled for ENTER INTEGRATED SERVICES. To learn about the experience for non-natively enabled services, see Identity and Access for non-natively enabled services.
You need to have specific roles assigned to be able to manage user access:
- To view the role and entity assignment for users, you need the
account_viewer
role. - To assign roles to users and update the assignment, you need the
account_admin
role.
If you don’t have these roles, you need to ask an administrator of your account to assign it to you.
Configure access settings for new users
In the Cloud Manager platform, there are two ways you can configure the Cloud Manager access for a user, from the Roles tab or from a user’s page. The Roles tab allows you to first go through all the available roles with their descriptions and permissions. Also, this option allows you to assign a set of roles to multiple users. The user page is recommended if you already know the roles you want to assign to the users and it works only for a single user.
To configure access for a new user:
- If you want to use the Roles tab, see Assign specific roles to a user.
- If you want to use a user page:
- Log in to Cloud Manager.
- In the main navigation, select Identity and Access.
- In the users list, find the user of interest and click …. > View Assigned Roles.
- To assign a new role, click Assign New Roles:
- From the dropdown, select a role you want to assign. If you know the name of the role, you can enter it.
- If the role is an entity access role, select Entities the role should be applied to the specific user.
- To add more roles, click Add another role.
- Click Assign. The roles you assigned are now visible in the Roles tab. If roles apply to specific entities, those entities are now listed in the Entities tab, where you can update their assignment.
Check and update basic user settings or delete the user
You can check and update users’ email address and username or delete the user from your account.
To check and update user’s basic settings or delete the user:
- Log in to Cloud Manager.
- In the main navigation, select Identity and Access.
- In the users list, find the user of interest and click ….:
- To view user’s username or email address, click View User Details. If needed, implement changes and click Save for each of them.
- To delete the user, click Delete. Confirm your decision.
Check and update users’ role assignment
View users’ role assignment to verify if they have the appropriate access. You can then add a new role or update the assignment.
To check and update role assignment:
- Log in to Cloud Manager.
- In the main navigation, select Identity and Access.
- In the users list, find the user of interest and click …. > View Assigned Roles. Here you have the list of all roles assigned to the user. Note that you can expand each role to check its description and included permissions.
- To assign a completely new role, click Assign New Roles:
- From the dropdown, select a role you want to assign. If you know the name of the role, you can enter it.
- If the role is an entity access role, select Entities the role should be applied to the specific user.
- To add more roles, click Add another role.
- Click Assign. The roles you assigned are now visible in the Roles tab. If roles apply to specific entities, these entities are now listed in the Entities tab, where you can update their assignment.
- To update an assigned role, find the role of interest. The extent of available updates differs based on the type of role you want to update.
- For account access roles, you can:
- Replace the current role with another account access role:
- Next to the role, click … > Change Role.
- Select or enter another account access role to replace the current role with.
- Click Save Change
- Unassign the role from the user:
- Next to the role, click … > Unassign Role.
- Confirm your decision.
- Replace the current role with another account access role:
- For entity access roles, you can:
- View the full list of entities assigned to the role. Next to the role, click … > View Entities. To learn how to update this list, see Check and update users’ entity assignment.
- Update the list of entities assigned to the role:
- Next to the role, click … > Update List of Entities.
- To remove an entity from the list, click
x
the entities tag. - To add a new entity, select or enter its name in the Entities field.
- Replace the current role with another entity access role preserving the current list of entities:
- Next to the role, click … > Change Role.
- Select or enter a role that’s applicable to the same entity type as the original role.
- Optional: Update the list of entities. Either click
x
on the entity tag to remove it, or add a new entity. - Click Save Change.
- Unassign the role from the user:
- Next to the role, click … > Unassign Role.
- Confirm your decision.
- For account access roles, you can:
Check and update users’ entity assignment
View users’ entity assignment to verify if they have the appropriate access to specific entities. You can modify the role assignment for each entity or block access to the entity.
To check and update entity assignment:
-
Log in to Cloud Manager.
-
In the main navigation, select Identity and Access.
-
In the users list, find the user of interest and click …. > View Entity Access. Here you have the list of all entities the user has access to.
The list doesn’t include entities the user has access to from the account access roles. It shows only entities assigned in entity access roles. You can click a name of an entity to go to its details page.
-
To update the role assignment to the entity and for example, to upgrade or downgrade the access:
- Find the entity of interest, click ...>Change Role.
- Select or enter a new role to be assigned to the entity.
- Click Save Changes.
-
To remove access to particular entity:
- Find the entity of interest, click ...>Remove Assignment.
- Confirm your decision.
Assign specific roles to a user
If you want to assign specific roles to a user, you can use the Roles tab. This allows you to check the full list of available roles together with their descriptions and select which of them fit to specific users.
To assign specific roles to users:
-
Log in to Cloud Manager.
-
In the main navigation, select Identity and Access.
-
Go to the Roles tab.
-
Review the list of roles. Note that you can filter the list by entities and to see the included permissions, you can expand each role.
-
Select checkboxes next to roles you want to assign.
-
Click Assign Selected Roles.
-
In the Users field, select or enter a user to assign the roles to.
-
If the selected roles are entity access roles, select or enter Entities the role for the selected users should apply to.
-
Click Assign.
Updated about 6 hours ago