Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 13 additions & 2 deletions pages/iam/how-to/manage-groups.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -45,14 +45,20 @@ From the groups's [Overview page](#how-to-access-the-group-overview), scroll dow
2. Select the user you want to add from the drop-down menu, or type the name of the user.
3. Click **Validate**. You are returned to the group's overview page, where the newly-added user now appears.

<Message type="important">
Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

### Remove users from a group

1. In the **Users** panel, click the **X** button next to the user you want to remove from the group. A pop-up displays asking you to confirm the action.
2. Click **Remove from group** to confirm.
<Message type="important">
Removing a user from a group means that any permissions given to them via the group (i.e. from an attached policy) will no longer apply. Be sure you want to remove these permissions from the user before proceeding.
- Removing a user from a group means that any permissions given to them via the group (i.e. from an attached policy) will no longer apply. Be sure you want to remove these permissions from the user before proceeding.
- Due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
</Message>


## How to manage a group's applications

From the group's [Overview page](#how-to-access-the-group-overview), scroll to the **Applications** panel. A list of all applications in the group displays.
Expand Down Expand Up @@ -80,7 +86,8 @@ From the groups' [Overview page](#how-to-access-the-group-overview), scroll to t
1. In the **Policies** panel, click the **X** button next to the policy you want to detach from the group. A pop-up displays asking you to confirm the action.
2. Click **Detach policy** to confirm.
<Message type="important">
Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the application means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
- Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the application means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
- Due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

### Attach a policy to a group
Expand All @@ -96,6 +103,10 @@ A group may be attached to multiple policies.
To create a new policy, see our [dedicated how to](/iam/how-to/create-policy/).
</Message>

<Message type="important">
Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

## How to delete a group

1. From the groups's [**Overview** tab](#how-to-access-the-group-overview), scroll down to the **Delete group** panel.
Expand Down
15 changes: 12 additions & 3 deletions pages/iam/how-to/manage-policies.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,9 @@ From the policy's [Overview page](#how-to-access-the-policy-overview):
1. From the policy's [Overview page](#how-to-access-the-policy-overview), scroll down to the **Rules** panel and click <Icon name="edit" /> next to the rule you want to edit.
2. Edit the rule as required. You can edit the scope, permission sets and conditions.
<Message type="important">
Conditions can only be edited using the **Advanced** editor. You must update the [CEL](/iam/concepts#common-expression-language-cel) expression in the editor to update the condition. Refer to the [Understanding policy conditions](/iam/reference-content/understanding-policy-conditions) documentation page for more details about how to write condition expressions, as well as examples of conditions.
Keep in mind that:
- Conditions can only be edited using the **Advanced** editor. You must update the [CEL](/iam/concepts#common-expression-language-cel) expression in the editor to update the condition. Refer to the [Understanding policy conditions](/iam/reference-content/understanding-policy-conditions) documentation page for more details about how to write condition expressions, as well as examples of conditions.
- Due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
</Message>
3. Click **Validate** to finish.
<Message type="tip">
Expand All @@ -54,7 +56,8 @@ From the policy's [Overview page](#how-to-access-the-policy-overview):
1. Click the **x** button next to the policy you want to detach from the user. A pop-up displays asking you to confirm the action.
2. Click **Detach policy** to confirm.
<Message type="important">
Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the user means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
- Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the user means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
- Due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

## How to attach another policy to a user
Expand All @@ -71,6 +74,10 @@ A user may be attached to multiple policies.
4. Click **Validate** to finish.
The selected policy is attached to the user.

<Message type="important">
Keep in mind that, due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

## How to delete a policy

<Message type="important">
Expand All @@ -81,4 +88,6 @@ A user may be attached to multiple policies.
2. Click **Delete policy**. A warning displays, asking you to confirm your action.
3. Type **DELETE** to confirm, and click **Delete policy** to validate.


<Message type="important">
Keep in mind that, due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
</Message>
4 changes: 4 additions & 0 deletions pages/iam/reference-content/policy.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,10 @@ A permission set consists of one or multiple permissions to perform actions on r
You can find a detailed list of all permission sets available at Scaleway in the permission sets [reference page](/iam/reference-content/permission-sets/).
</Message>

<Message type="important">
Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
</Message>

### Conditions

A condition is an additional layer of restrictions for your rule. You can allow access to specific user agents or IP addresses, and allow actions to be performed only at certain dates and times. Conditions are defined through [CEL](#common-expression-language-cel) expressions. In general, a condition expression consists of one or more statements that are joined by logical operators (`&&`, `||`, or `!`).
Expand Down