IAM Introduction

IAM helps you manage users, roles, policies, and authentication rules in one place.

Permissions and My account

My account is available to every signed-in user regardless of permissions, for managing your own profile and security settings. All other IAM menus require appropriate permissions.

Feature Summary

Access Management

Feature	Description
Users	Create, manage, and delete user accounts
User Groups	Organize users and assign roles at group level
Service Accounts	Manage service accounts for API access
Roles	Define permission sets to assign to users/groups
Policies	Create detailed permission rules with actions and targets

Authentication

Feature	Description
MFA Policies	Configure multi-factor authentication requirements
Login Policies	Set password complexity and account lockout rules

Session Management

Feature	Description
Session Policies	Define session timeout and security rules
Active Sessions	Monitor and terminate user sessions
Token Policies	Configure access and refresh token lifetimes

Global Administration

Feature	Description
Domains	Manage organizational domains for multi-tenancy
System Administrators	Manage global IAM administrators

Monitoring

Feature	Description
Event Logs	View audit trail of all IAM activities

Getting Started

Prerequisites

• You must have System Administrator or Domain Administrator privileges

Step 1 — Create a User

1. Go to IAM → Users.
2. Click Create User.
3. Enter the name, email, and password.
4. Click Create.

Step 2 — Grant Permissions via User Groups

To grant standing (formal) permissions to a user, use user groups. Assign roles and policies to a group and add users to it — the group's permissions then apply to all its members.

1. Go to IAM → User groups → Create user group.
2. Enter the group name and click Create.
3. On the group detail page, use Manage Users to add users.
4. In the Roles tab, assign roles and policies to the group.

Step 3 — Assign a Role Directly (optional)

When a user needs temporary permissions, assign a role directly to the user. For standing permissions, prefer user groups.

1. Click the created user name to open the detail page.
2. In the Roles tab, click Add Role.
3. Select an appropriate role and click Save.

Next Steps

• Manage Users →
• Manage Roles →
• Manage Policies →
• Security Policies →