Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified pages/iam/how-to/assets/scaleway-groups-overview.webp
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified pages/iam/how-to/assets/scaleway-user-info.webp
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
45 changes: 35 additions & 10 deletions pages/iam/how-to/manage-members.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -20,19 +20,25 @@ dates:
1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.
2. Click **+ Add user**. A pop-up displays prompting you to choose between creating a **Member** or adding a **Guest**.
3. Select **Member** and click **Continue**.
4. Enter a username and the email address of the Member you want to add to your Organization.
4. Enter the username of the Member you want to add to your Organization.
<Message type="important">
When you create a Member, a Scaleway account is created for them. They exist only within your Organization. If you delete the Member, their account is also deleted. Make sure you inform your Members that [logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is different from [logging in as a Guest or as an Owner](/account/how-to/log-in-to-the-console).
</Message>
5. (Optional) Check the box if you want to send a welcome email to the Member.
6. Add a password.
5. (Optional) Add a password.
<Message type="note">
This step is optional. If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member has up to 3 days to update their password and comply with this security requirement.
If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member must update their password. They must comply with this security requirement within the [grace period](/iam/concepts#grace-period) defined for your Organization.
</Message>
7. (Optional) Check the box if you want to send the password to the Member via email.
8. Click **Create Member**.
6. (Optional) Check the box if you want to send the password to the Member via email.
7. Click **Next**.
8. Enter the Member's email address.
9. (Optional) Check the box if you want to send a welcome email to the Member.
10. (Optional) Enter the first and last name of the member.
11. (Optional) Assign the member to an existing [IAM group](/iam/concepts/#group)
12. Click **Create Member**.

If you did not send an welcome email to the Member, make sure you give them their login information.
<Message type="important">
If you did not send a welcome email to the Member, make sure you give them their login information.
</Message>

## How to lock a Member

Expand Down Expand Up @@ -74,16 +80,36 @@ The Member is unlocked.

## How to edit a Member's information

You can edit a Member's username, email address, and password.
You can edit a Member's:
- **Personal information** - username, first and last names, email address, phone number and preferred language
- **Credentials** - username, email and password.

<Message type="note">
Follow the procedure below to edit your own Member information.
Follow the procedure below to edit your own information as a Member.
</Message>

### How to edit personal information

1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.
2. Click the name of the Member you want to edit. Alternatively, click <Icon name="more" /> next to the Member, and select **Overview**. Either way, you are taken to the user's **Overview** tab.
3. Click **Edit** <Icon name="edit" /> in the **User profile** section. A pop-up appears.
4. Edit the information.
<Message type="important">
The email address field must not be left empty.
</Message>
5. Click **Confirm**.

The updated information appears in the Member Overview.

### How to edit credentials

1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.
2. Click the name of the Member you want to edit. Alternatively, click <Icon name="more" /> next to the Member, and select **Overview**. Either way, you are taken to the user's **Overview** tab.
3. Click the **Credentials** tab.
4. Click **Edit** next to the information you want to update in the **Sign in credentials** section. For each credential a different pop-up appears.
<Message type="note">
You need IAM Manager permissions to change your own username.
</Message>
5. Enter the new information in the box.
<Message type="important">
Passwords are optional. When you create or update a password for a Member, you can opt to send the password to the Member via email. Once a new password is created, it is not stored or shown in the Scaleway console. Copy and safely store them before leaving the **Edit password** pop-up.
Expand All @@ -103,7 +129,6 @@ Refer to the dedicated [How to enforce security for Members](/iam/how-to/enforce
- [How to stop enforcing password renewal](/iam/how-to/enforce-security-requirements-members/#how-to-stop-enforcing-password-renewal)
- [How to edit the grace period of your Organization](/iam/how-to/enforce-security-requirements-members/#how-to-edit-the-grace-period-of-your-organization)


## How to delete a Member

<Message type="important">
Expand Down
40 changes: 20 additions & 20 deletions pages/iam/how-to/manage-users.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -30,15 +30,18 @@ You can manage IAM users of an Organization if you are the [Owner](/iam/concepts

## How to view user information

From the user's [Overview tab](#how-to-access-the-user-overview), you can view information including the user's **status**, **type** (Owner, Guest or Member), **joined on** date and whether they have [MFA](/account/concepts/#multifactor-authentication-mfa) enabled in the **User Information** panel at the top of the page.
From the user's [Overview tab](#how-to-access-the-user-overview), you can view information such as:

On this page you can also find an extensive list of the user's permission sets, the name of their associated policies and the scope they apply to.
- **User details** - The user's type (Owner, Guest or Member), status, **joined on** (for Guests) or **created on** (for Members) date, whether they have [MFA](/account/concepts/#multifactor-authentication-mfa) enabled, and the date of their last login.
- **User profile** - The user's username, first and last names, email address, telephone number, preferred language, and their Scaleway ID number.

<Lightbox src="scaleway-user-info.webp" alt="" />

## How to manage a user's groups
In the Overview tab, you can also find an extensive list of the user's permission sets, the name of their associated policies and the scope they apply to.

From the user's [Overview tab](#how-to-access-the-user-overview), scroll down to the **Groups** panel. A list of the groups the user is part of displays:
## How to manage a user's groups and policies

From the user's **Groups & policies** tab, you can find a list of the user's groups and policies.

<Lightbox src="scaleway-groups-overview.webp" alt="" />

Expand All @@ -63,12 +66,6 @@ A user may be part of multiple groups at the same time.
Learn [how to create a new IAM group](/iam/how-to/create-group/).
</Message>

## How to manage a user's policies

From the user's [**Overview** tab](#how-to-access-the-user-overview), scroll down to the **Policies** panel. A list of policies attached to the user displays:

<Lightbox src="scaleway-iam-policies.webp" alt="" />

### Detach a policy from a user

1. Click the **x** button next to the policy you want to detach from the user. A pop-up displays asking you to confirm the action.
Expand All @@ -81,20 +78,20 @@ From the user's [**Overview** tab](#how-to-access-the-user-overview), scroll dow

A user may be attached to multiple policies.

1. Click **Attach a policy** to attach another policy to the user. A pop-up displays, prompting you to select a policy.
2. Select the policy you want to attach to the user from the drop-down list, or type the name of the policy.
3. Click **Validate** to finish.
The selected policy is attached to the user, and you are returned to the **Overview** tab.
1. Click **Attach a policy** to attach another policy to the user. A pop-up displays.
2. Select an action between: **creating a new policy**, **selecting an unassigned policy** or **duplicating an existing policy**.

<Message type="tip">
To create a new policy, see our [dedicated how to](/iam/how-to/create-policy/).
</Message>
<Message type="note">
When you [create a new policy](/iam/how-to/create-policy/) or duplicate an existing one, you are redirected to the IAM policies page. The following steps apply when you choose to select an unassigned policy.
</Message>
3. Select the policy you want to attach to the user from the drop-down list.
4. Click **Validate** to finish.
The selected policy is attached to the user.

## How to view and delete user API keys

1. From the user's [Overview tab](#how-to-access-the-user-overview), click the **Credentials** tab.
1. Click the user's **Credentials** tab.
You can view details of the user's [API keys](/iam/how-to/create-api-keys/).
<Lightbox src="scaleway-api-key.webp" alt="" />
<Message type="note">
You cannot see the secret key part of any API keys, nor can you create an API key for any IAM user other than yourself.
</Message>
Expand All @@ -103,7 +100,7 @@ A user may be attached to multiple policies.
A warning displays, reminding you that this action is permanent.
3. Type **DELETE** and click **Submit** to confirm the action.

## How to remove a user from the Organization
## How to remove a guest from an Organization

<Message type="note">
To remove any users other than yourself, you must either be the [Owner](/iam/concepts#owner) of the Organization, or have [IAMManager permissions](/iam/reference-content/permission-sets/). The exception to this is that you can always remove yourself as an IAM user from an Organization in which you are a [Guest](/iam/concepts#guest), anytime. This equates to leaving the Organization. You cannot leave an Organization that you own.
Expand All @@ -115,3 +112,6 @@ A user may be attached to multiple policies.
<Lightbox src="scaleway-remove-user-popup.webp" alt="A pop up box displaying a warning: Removing a user from this Organization automatically deletes their API keys, and any policies directly attached to them become orphaned" />
3. Type **REMOVE** to confirm, and click **Remove user** to validate.

<Message type="note">
If you want to delete a Member, follow the corresponding steps in the [How to manage Members](/iam/how-to/manage-members/#how-to-delete-a-member) documentation page.
</Message>
2 changes: 1 addition & 1 deletion pages/iam/quickstart.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ Invite other users to be able to give them access to your Organization. You will
5. (Optional) Check the box if you want to send a welcome email to the Member.
6. Add a password.
<Message type="note">
This step is optional. If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member has up to 3 days to update their password and comply with this security requirement.
If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member must update their password. They must comply with this security requirement within the [grace period](/iam/concepts#grace-period) defined for your Organization.
</Message>
7. (Optional) Check the box if you want to send the password to the Member via email.
8. Click **Create Member**.
Expand Down