1. Articles
  2. Manage and Operate
  3. IAM

Articles in this section

Enabling User Rights to OVHcloud Control Panel through SSO

Avatar
Stephanie R.
  • Updated

Learn how to provide a user with the minimum rights to allow them to log in to the OVHcloud Control Panel.

 

Requirements

 

Instructions

To be able to log in to the OVHcloud Control Panel, a user should have at least this set of rights on the account resource:

  • account:apiovh:me/get
  • account:apiovh:me/certificates/get
  • account:apiovh:me/tag/get

With these rights, a user will be able to log in to the OVHcloud Control Panel. To be able to perform any actions inside the Control Panel additional rights have to be assigned through IAM.

 

Using UI

Using the UI, you can set up a policy with the following configuration:

  • Add a resourceType "OVHcloud customer account".
  • Add your account as a resource.
  • Add the three rights listed above as an action.

IAM_enablerights01.png

You can now link your users to this policy to give them the right to log in to the OVHcloud Control Panel.

If you plan to use additional policies, it is not necessary to give any additional permissions.

 

Using API

Using the API, you can set up a policy according to the following example:

{
  "name": "manager_ro",
  "description": "manager_ro",
  "identities": [
    .... 
  ],
  "resources": [ 
     {
         "urn": "urn:v1:us:resource:account:xx1111-ovh" 
     }],
  "permissions": {
    "allow": [
      {
        "action": "account:apiovh:me/get"
      },
      {
        "action": "account:apiovh:me/supportLevel/get"
      },
      {
        "action": "account:apiovh:me/certificates/get"
      },
      {
        "action": "account:apiovh:me/tag/get"
      }
    ]
  }
}

 

Go further

For more information and tutorials, please see our other IAM or Manage and Operate guides, or explore the guides for other OVHcloud products and services.

Related articles