-
Notifications
You must be signed in to change notification settings - Fork 242
feat(iam): remove guests #5022
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
feat(iam): remove guests #5022
Changes from 1 commit
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -54,27 +54,29 @@ You are the [Owner](#owner) of the Organization that is created with your Scalew | |
|
||
Similarly, you can invite other users to be Guests in your Organization. Whereas Owners have full rights and access to all resources and features in their Organization, Guests have only the rights and permissions given to them via [policies](#policy). | ||
|
||
ldecarvalho-doc marked this conversation as resolved.
Show resolved
Hide resolved
|
||
<Lightbox src="scaleway-iam-owners-guests.webp" alt="" /> | ||
<Message type="important"> | ||
ldecarvalho-doc marked this conversation as resolved.
Show resolved
Hide resolved
|
||
Guests will be deprecated by July 2025. From then on, only Members can be created as users of your Organizations. | ||
</Message> | ||
ldecarvalho-doc marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
## IAM | ||
|
||
**I**dentity and **A**ccess **M**anagement allows you to share access to the management of your Scaleway [resources](#resource) in a controlled and secure manner. | ||
|
||
This is achieved by inviting users to be Guests in your account's [Organization](#organization), and creating [policies](#policy) that define in a very fine-grained way exactly what permissions they should have for which [resources](#resource) in which of your [Projects](#project) or across your whole Organization. | ||
This is achieved by adding members to your [Organization](#organization), and creating [policies](#policy) that define in a very fine-grained way exactly what permissions they should have for which [resources](#resource) in which of your [Projects](#project) or across your whole Organization. | ||
ldecarvalho-doc marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
Similarly, you may participate as a Guest in someone else's Organization, where you will have the precise rights that they accord to you using policies. | ||
Similarly, you may be added as a Member in someone else's Organization, where you will have the precise rights that they accord to you using policies. | ||
|
||
You can also create non-human users in your Organization, called [IAM applications](#application), in order to give applications programmatic access to your Scaleway resources. | ||
|
||
## Member | ||
|
||
You are a Member when you are added to an Organization by an Owner or user with IAM Manager permissions. Members exist only within the specific Organizations in which they are created. This is one of the methods employed at Scaleway to allow Organizations to have multi-users. Members fulfill the same purpose as Guest, while ensuring the security of the Organization. | ||
You are a Member when you are added to an Organization by an Owner or user with IAM Manager permissions. Members exist only within the specific Organizations in which they are created. This is one of the methods employed at Scaleway to allow Organizations to have multi-users. | ||
ldecarvalho-doc marked this conversation as resolved.
Show resolved
Hide resolved
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This is one of the methods employed at Scaleway to allow Organizations to have multiple users. |
||
|
||
As a Member you are subject to [complying with the security requirements](/iam/how-to/comply-with-sec-requirements-member) in effect in your Organization. [Logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is also different from [logging in as a Guest or as an Owner](/account/how-to/log-in-to-the-console). | ||
As a Member you are subject to [complying with the security requirements](/iam/how-to/comply-with-sec-requirements-member) in effect in your Organization. [Logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is also different from [logging in as an Owner](/account/how-to/log-in-to-the-console). | ||
|
||
## Organization | ||
|
||
An Organization is made of one or several [Projects](#project). When you create your Scaleway account, an Organization is automatically created, of which you are the Owner. You can also be added to an existing Organization as a [Guest](#guest) or as a [Member](#member). | ||
An Organization is made of one or several [Projects](#project). When you create your Scaleway account, an Organization is automatically created, of which you are the Owner. You can also be added to an existing Organization as a [Member](#member). | ||
ldecarvalho-doc marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
When you create [IAM rules](#rule), you can set their scope at Organization level. This means you can give access to features managed at Organization level, like billing and IAM, to users, applications, and groups in your Organization. | ||
|
||
|
@@ -86,7 +88,7 @@ The Organization ID identifies the [Organization](#organization) created with yo | |
|
||
## Owner | ||
|
||
You are the [Owner](#owner) of the Organization that is created with your Scaleway account. Owners have full rights and access to all resources and features in their Organization. See also [Guest](#guest) and [Member](#member). | ||
You are the [Owner](#owner) of the Organization that is created with your Scaleway account. Owners have full rights and access to all resources and features in their Organization. See also [Member](#member). | ||
|
||
## Permission | ||
|
||
|
@@ -158,6 +160,9 @@ Keep in mind that: | |
A user (also known as an IAM user) is a human user in an Organization. They can be of two types: | ||
- **Owner**: You are the Owner of the [Organization](#organization) that was created with your account. | ||
- **Guest**: You are a Guest when invited to another Organization of which you are not the Owner. Similarly, you can invite other users to be Guests in your Organization. | ||
ldecarvalho-doc marked this conversation as resolved.
Show resolved
Hide resolved
|
||
<Message type="important"> | ||
Guests will be deprecated by July 2025. From then on, only Members can be created as users of your Organizations. | ||
</Message> | ||
- **Member**: You are a Member when you are added to an Organization by an Owner or user with IAM Manager permissions. Members exist only within the specific Organizations in which they are created. | ||
|
||
Within each Organization, different IAM users can have different rights (defined through [policies](#policy)) to perform actions on resources. |
This file was deleted.
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -18,28 +18,45 @@ dates: | |
## How to create a Member | ||
|
||
1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays. | ||
2. Click **+ Add user**. A pop-up displays prompting you to choose between creating a **Member** or adding a **Guest**. | ||
3. Select **Member** and click **Continue**. | ||
4. Enter the username of the Member you want to add to your Organization. | ||
2. Click **+ Add user**. A pop-up displays. | ||
3. Enter the username of the Member you want to add to your Organization. | ||
<Message type="important"> | ||
When you create a Member, a Scaleway account is created for them. They exist only within your Organization. If you delete the Member, their account is also deleted. Make sure you inform your Members that [logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is different from [logging in as a Guest or as an Owner](/account/how-to/log-in-to-the-console). | ||
When you create a Member, a Scaleway account is created for them. They exist only within your Organization. If you delete the Member, their account is also deleted. Make sure you inform your Members that [logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is different from [logging in as an Owner](/account/how-to/log-in-to-the-console). | ||
</Message> | ||
5. (Optional) Add a password. | ||
4. (Optional) Add a password. | ||
<Message type="note"> | ||
If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member must update their password. They must comply with this security requirement within the [grace period](/iam/concepts#grace-period) defined for your Organization. | ||
</Message> | ||
6. (Optional) Check the box if you want to send the password to the Member via email. | ||
7. Click **Next**. | ||
8. Enter the Member's email address. | ||
9. (Optional) Check the box if you want to send a welcome email to the Member. | ||
10. (Optional) Enter the first and last name of the member. | ||
11. (Optional) Assign the member to an existing [IAM group](/iam/concepts/#group) | ||
12. Click **Create Member**. | ||
5. (Optional) Check the box if you want to send the password to the Member via email. | ||
6. Click **Next**. | ||
7. Enter the Member's email address. | ||
8. (Optional) Check the box if you want to send a welcome email to the Member. | ||
9. (Optional) Enter the first and last name of the member. | ||
10. (Optional) Assign the member to an existing [IAM group](/iam/concepts/#group) | ||
11. Click **Create Member**. | ||
|
||
<Message type="important"> | ||
If you did not send a welcome email to the Member, make sure you give them their login information. | ||
</Message> | ||
|
||
## How to access the Member overview | ||
|
||
1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays. | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Feels like we're missing a step here, because to find the |
||
<Lightbox src="scaleway-iam-users-dashboard.webp" alt="" /> | ||
2. Click the name of the user you want to manage. Alternatively, click <Icon name="more" /> next to the user, and select **Overview**. Either way, you are taken to the user's **Overview** tab. | ||
Follow the steps below depending on the management action you wish to take. | ||
|
||
## How to view Member information | ||
|
||
From the user's [Overview tab](#how-to-access-the-user-overview), you can view information such as: | ||
|
||
- **User details** - The user's type (Owner or Member), status, **created on** date, whether they have [MFA](/account/concepts/#multifactor-authentication-mfa) enabled, and the date of their last login. | ||
- **User profile** - The user's username, first and last names, email address, telephone number, preferred language, and their Scaleway ID number. | ||
|
||
<Lightbox src="scaleway-user-info.webp" alt="" /> | ||
|
||
In the Overview tab, you can also find an extensive list of the user's permission sets, the name of their associated policies and the scope they apply to. | ||
|
||
## How to lock a Member | ||
|
||
As an Owner or user with IAM Manager permissions, you can lock a Member anytime. | ||
|
Uh oh!
There was an error while loading. Please reload this page.