diff --git a/pages/iam/how-to/assets/scaleway-groups-overview.webp b/pages/iam/how-to/assets/scaleway-groups-overview.webp index afd153d7be..8ed3ee906b 100644 Binary files a/pages/iam/how-to/assets/scaleway-groups-overview.webp and b/pages/iam/how-to/assets/scaleway-groups-overview.webp differ diff --git a/pages/iam/how-to/assets/scaleway-user-info.webp b/pages/iam/how-to/assets/scaleway-user-info.webp index da2ed98192..e7234a5c19 100644 Binary files a/pages/iam/how-to/assets/scaleway-user-info.webp and b/pages/iam/how-to/assets/scaleway-user-info.webp differ diff --git a/pages/iam/how-to/manage-members.mdx b/pages/iam/how-to/manage-members.mdx index 2d7a2ae8f2..9c6a501cde 100644 --- a/pages/iam/how-to/manage-members.mdx +++ b/pages/iam/how-to/manage-members.mdx @@ -20,19 +20,25 @@ dates: 1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays. 2. Click **+ Add user**. A pop-up displays prompting you to choose between creating a **Member** or adding a **Guest**. 3. Select **Member** and click **Continue**. -4. Enter a username and the email address of the Member you want to add to your Organization. +4. Enter the username of the Member you want to add to your Organization. When you create a Member, a Scaleway account is created for them. They exist only within your Organization. If you delete the Member, their account is also deleted. Make sure you inform your Members that [logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is different from [logging in as a Guest or as an Owner](/account/how-to/log-in-to-the-console). -5. (Optional) Check the box if you want to send a welcome email to the Member. -6. Add a password. +5. (Optional) Add a password. - This step is optional. If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member has up to 3 days to update their password and comply with this security requirement. + If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member must update their password. They must comply with this security requirement within the [grace period](/iam/concepts#grace-period) defined for your Organization. -7. (Optional) Check the box if you want to send the password to the Member via email. -8. Click **Create Member**. +6. (Optional) Check the box if you want to send the password to the Member via email. +7. Click **Next**. +8. Enter the Member's email address. +9. (Optional) Check the box if you want to send a welcome email to the Member. +10. (Optional) Enter the first and last name of the member. +11. (Optional) Assign the member to an existing [IAM group](/iam/concepts/#group) +12. Click **Create Member**. -If you did not send an welcome email to the Member, make sure you give them their login information. + + If you did not send a welcome email to the Member, make sure you give them their login information. + ## How to lock a Member @@ -74,16 +80,36 @@ The Member is unlocked. ## How to edit a Member's information -You can edit a Member's username, email address, and password. +You can edit a Member's: + - **Personal information** - username, first and last names, email address, phone number and preferred language + - **Credentials** - username, email and password. - Follow the procedure below to edit your own Member information. + Follow the procedure below to edit your own information as a Member. +### How to edit personal information + +1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays. +2. Click the name of the Member you want to edit. Alternatively, click next to the Member, and select **Overview**. Either way, you are taken to the user's **Overview** tab. +3. Click **Edit** in the **User profile** section. A pop-up appears. +4. Edit the information. + + The email address field must not be left empty. + +5. Click **Confirm**. + +The updated information appears in the Member Overview. + +### How to edit credentials + 1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays. 2. Click the name of the Member you want to edit. Alternatively, click next to the Member, and select **Overview**. Either way, you are taken to the user's **Overview** tab. 3. Click the **Credentials** tab. 4. Click **Edit** next to the information you want to update in the **Sign in credentials** section. For each credential a different pop-up appears. + + You need IAM Manager permissions to change your own username. + 5. Enter the new information in the box. Passwords are optional. When you create or update a password for a Member, you can opt to send the password to the Member via email. Once a new password is created, it is not stored or shown in the Scaleway console. Copy and safely store them before leaving the **Edit password** pop-up. @@ -103,7 +129,6 @@ Refer to the dedicated [How to enforce security for Members](/iam/how-to/enforce - [How to stop enforcing password renewal](/iam/how-to/enforce-security-requirements-members/#how-to-stop-enforcing-password-renewal) - [How to edit the grace period of your Organization](/iam/how-to/enforce-security-requirements-members/#how-to-edit-the-grace-period-of-your-organization) - ## How to delete a Member diff --git a/pages/iam/how-to/manage-users.mdx b/pages/iam/how-to/manage-users.mdx index abd723fe30..09272f2cda 100644 --- a/pages/iam/how-to/manage-users.mdx +++ b/pages/iam/how-to/manage-users.mdx @@ -30,15 +30,18 @@ You can manage IAM users of an Organization if you are the [Owner](/iam/concepts ## How to view user information -From the user's [Overview tab](#how-to-access-the-user-overview), you can view information including the user's **status**, **type** (Owner, Guest or Member), **joined on** date and whether they have [MFA](/account/concepts/#multifactor-authentication-mfa) enabled in the **User Information** panel at the top of the page. +From the user's [Overview tab](#how-to-access-the-user-overview), you can view information such as: -On this page you can also find an extensive list of the user's permission sets, the name of their associated policies and the scope they apply to. + - **User details** - The user's type (Owner, Guest or Member), status, **joined on** (for Guests) or **created on** (for Members) date, whether they have [MFA](/account/concepts/#multifactor-authentication-mfa) enabled, and the date of their last login. + - **User profile** - The user's username, first and last names, email address, telephone number, preferred language, and their Scaleway ID number. -## How to manage a user's groups +In the Overview tab, you can also find an extensive list of the user's permission sets, the name of their associated policies and the scope they apply to. -From the user's [Overview tab](#how-to-access-the-user-overview), scroll down to the **Groups** panel. A list of the groups the user is part of displays: +## How to manage a user's groups and policies + +From the user's **Groups & policies** tab, you can find a list of the user's groups and policies. @@ -63,12 +66,6 @@ A user may be part of multiple groups at the same time. Learn [how to create a new IAM group](/iam/how-to/create-group/). -## How to manage a user's policies - -From the user's [**Overview** tab](#how-to-access-the-user-overview), scroll down to the **Policies** panel. A list of policies attached to the user displays: - - - ### Detach a policy from a user 1. Click the **x** button next to the policy you want to detach from the user. A pop-up displays asking you to confirm the action. @@ -81,20 +78,20 @@ From the user's [**Overview** tab](#how-to-access-the-user-overview), scroll dow A user may be attached to multiple policies. -1. Click **Attach a policy** to attach another policy to the user. A pop-up displays, prompting you to select a policy. -2. Select the policy you want to attach to the user from the drop-down list, or type the name of the policy. -3. Click **Validate** to finish. - The selected policy is attached to the user, and you are returned to the **Overview** tab. +1. Click **Attach a policy** to attach another policy to the user. A pop-up displays. +2. Select an action between: **creating a new policy**, **selecting an unassigned policy** or **duplicating an existing policy**. - - To create a new policy, see our [dedicated how to](/iam/how-to/create-policy/). - + + When you [create a new policy](/iam/how-to/create-policy/) or duplicate an existing one, you are redirected to the IAM policies page. The following steps apply when you choose to select an unassigned policy. + +3. Select the policy you want to attach to the user from the drop-down list. +4. Click **Validate** to finish. + The selected policy is attached to the user. ## How to view and delete user API keys -1. From the user's [Overview tab](#how-to-access-the-user-overview), click the **Credentials** tab. +1. Click the user's **Credentials** tab. You can view details of the user's [API keys](/iam/how-to/create-api-keys/). - You cannot see the secret key part of any API keys, nor can you create an API key for any IAM user other than yourself. @@ -103,7 +100,7 @@ A user may be attached to multiple policies. A warning displays, reminding you that this action is permanent. 3. Type **DELETE** and click **Submit** to confirm the action. -## How to remove a user from the Organization +## How to remove a guest from an Organization To remove any users other than yourself, you must either be the [Owner](/iam/concepts#owner) of the Organization, or have [IAMManager permissions](/iam/reference-content/permission-sets/). The exception to this is that you can always remove yourself as an IAM user from an Organization in which you are a [Guest](/iam/concepts#guest), anytime. This equates to leaving the Organization. You cannot leave an Organization that you own. @@ -115,3 +112,6 @@ A user may be attached to multiple policies. 3. Type **REMOVE** to confirm, and click **Remove user** to validate. + + If you want to delete a Member, follow the corresponding steps in the [How to manage Members](/iam/how-to/manage-members/#how-to-delete-a-member) documentation page. + \ No newline at end of file diff --git a/pages/iam/quickstart.mdx b/pages/iam/quickstart.mdx index 39186c57af..2c6e959984 100644 --- a/pages/iam/quickstart.mdx +++ b/pages/iam/quickstart.mdx @@ -35,7 +35,7 @@ Invite other users to be able to give them access to your Organization. You will 5. (Optional) Check the box if you want to send a welcome email to the Member. 6. Add a password. - This step is optional. If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member has up to 3 days to update their password and comply with this security requirement. + If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member must update their password. They must comply with this security requirement within the [grace period](/iam/concepts#grace-period) defined for your Organization. 7. (Optional) Check the box if you want to send the password to the Member via email. 8. Click **Create Member**.