Identity and Access permissions and roles for Linode API

Identity and Access for Cloud is used to manage identities within an account and manage operations that those identities may perform. By authenticating identities and authorizing them to access specific services and entities, Identity and Access ensures that the right identities access the right entities. Identity and Access uses the role-based access control (RBAC) model to authorize operations on entities. To learn more, see Identity and Access in Cloud Manager.

🚧

Identity and Access in Limited Availability

The enablement of Identity and Access to all Cloud users will be done in stages. If you don't see Identity and Access in Cloud Manager, it means that the feature is not enabled on your account and you should continue using the Grant-based access control to authorize operations on entities.

This table lists the Identity and Access permissions or roles necessary to run specific Linode API operations.

• If the operation requires a specific permission, you need to check the Available roles list or run the List available roles operation and look for the role that contains the specific permission and fits the required access the most. Then, assign this role to your user or ask your account administrator to assign this role to you.
• If the operation requires a specific role to run it but no permission, it means that Identity and Access is not natively-enabled for this service yet. To learn more about this case, see Identity and Access for non-natively enabled services.
• For operations that have neither permission nor role next to them, continue using grant-based access control.

Review the Additional Comment, if appropriate for the specific endpoint.