Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit 9594611

Browse files
authored
Merge pull request #8578 from ovh/dev/gbarideau/iam-condition-ui
[Update] adding conditions on IAM guide
2 parents 18c37ee + 989237e commit 9594611

File tree

16 files changed

+408
-126
lines changed

16 files changed

+408
-126
lines changed

‎pages/account_and_service_management/account_information/iam-policy-ui/guide.de-de.md‎

Lines changed: 27 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Verwendung von IAM-Richtlinie über Ihr Kundencenter
33
excerpt: Erfahren Sie hier, wie Sie Benutzern im OVHcloud Kunden-Account spezifische Zugriffsrechte gewähren
4-
updated: 2025-08-27
4+
updated: 2025-10-27
55
---
66

77
## Ziel
@@ -77,15 +77,15 @@ Das folgende Formular wird angezeigt:
7777
- **Ressourcen**: Fügen Sie Ressourcen oder Ressourcengruppen hinzu, die durch die Richtlinie abgedeckt werden sollen. Die verfügbaren Ressourcen werden nach dem zuvor ausgewählten Produkttyp gefiltert.
7878
- **Aktionen**.
7979

80-
Es gibt drei Möglichkeiten, Aktionen hinzuzufügen:
80+
**Es gibt vier Möglichkeiten, Aktionen hinzuzufügen:**
8181

82-
- Aktivieren der Option `Alle Aktionen zulassen`{.action}
82+
##### 1 - Option Alle Aktionen zulassen" aktivieren
8383

8484
![Richtlinie erstellen](images/create_a_policy_02.png){.thumbnail}
8585

8686
Wenn Sie diese Option aktivieren, lassen Sie alle Aktionen zu, die sich auf die ausgewählten Produkte beziehen. Dies schließt alle bestehenden und in Zukunft hinzugefügten Aktionen für diese Produktkategorien ein.
8787

88-
- Auswählen einer verwalteten Berechtigungsgruppe
88+
##### 2 - Auswählen einer verwalteten Berechtigungsgruppe
8989

9090
Wir stellen Berechtigungsgruppen zur Verfügung, die von OVHcloud vorkonfiguriert und verwaltet werden.
9191
Sie können eine oder mehrere Gruppen aus der verfügbaren Liste auswählen.
@@ -96,7 +96,7 @@ Details zum Inhalt verwalteter Berechtigungsgruppen finden Sie in der zugehörig
9696

9797
Verwaltete Aktionsgruppen können als Ergänzung zu Komponentenaktionen verwendet werden.
9898

99-
- Manuelles Hinzufügen von Aktionen
99+
##### 3 - Aktionen manuell hinzufügen
100100

101101
Wenn Sie den Namen der Aktion kennen, können Sie sie manuell hinzufügen.
102102

@@ -110,7 +110,7 @@ Wenn Sie beispielsweise `vps:apiovh:ips/*` hinzufügen, geben Sie folgende Recht
110110
- **vps:apiovh:ips/delete**
111111
- **vps:apiovh:ips/get**
112112

113-
- Auswählen von Aktionen aus der Liste
113+
##### 4 - Aktionen aus der Liste auswählen
114114

115115
Aktionen können in der Liste ausgewählt werden.
116116

@@ -127,7 +127,27 @@ Die verfügbaren Aktionen hängen vom Ressourcentyp ab und gehören zu einer der
127127
Ein Suchfeld ist verfügbar, mit dem Sie eine bestimmte Aktion in der Liste identifizieren können.
128128

129129
> [!primary]
130-
> Aktionen im Zusammenhang mit IP- und vRack-Produkten sowie Aktionen im Zusammenhang mit der Bestellung und Abrechnung sind im IAM von OVHcloud noch nicht verfügbar.
130+
> Aktionen im Zusammenhang mit Bestellungen und Rechnungen sind im OVHcloud IAM noch nicht verfügbar.
131+
132+
#### Bedingungen für Richtlinien
133+
134+
Es ist möglich, Bedingungen an IAM-Richtlinien anzuhängen.
135+
136+
Eine Richtlinie mit Bedingungen ist gültig, wenn alle Bedingungen validiert sind.
137+
138+
Es ist möglich, Bedingungen für folgende Elemente festzulegen:
139+
140+
- Tag der Ressource
141+
- Name der Ressource
142+
- Produkttyp
143+
- IP-Adresse der Anfrage
144+
- Wochentag
145+
- Datum
146+
- Uhrzeit
147+
148+
![Richtlinie erstellen](images/conditions.png){.thumbnail}
149+
150+
Nachdem sie hinzugefügt wurden, werden die Bedingungen mit der [Syntax angezeigt, die in der API verwendet wird](/pages/account_and_service_management/account_information/iam-policies-api).
131151

132152
#### Richtlinien bearbeiten
133153

‎pages/account_and_service_management/account_information/iam-policy-ui/guide.en-asia.md‎

Lines changed: 27 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: How to use IAM policies using the OVHcloud Control Panel
33
excerpt: "Find out how to give specific access rights to users from an OVHcloud account"
4-
updated: 2025-08-27
4+
updated: 2025-10-27
55
---
66

77
## Objective
@@ -61,8 +61,6 @@ Each policy is displayed with its name, the number of identities linked to it, a
6161

6262
### Managing policies
6363

64-
<a name="create-policy"></a>
65-
6664
#### Creating a policy
6765

6866
Click the `Create a policy`{.action} button.
@@ -77,15 +75,15 @@ The following form will be displayed:
7775
- **Resources**: Add resources or resource groups to be covered by the policy. The resources available are filtered by the product type selected beforehand.
7876
- **Actions**.
7977

80-
There are 4 different ways to add actions:
78+
**There are 4 different ways to add actions:**
8179

82-
- Activating the `Authorise all actions`{.action} option
80+
##### 1 - Activating the "Authorise all actions" option
8381

8482
![Create a policy](images/create_a_policy_02.png){.thumbnail}
8583

8684
When activating this option, you allow all actions related to the selected products. This includes all existing actions as well as actions added in the future for these product types.
8785

88-
- Selecting a group of managed permissions
86+
##### 2 - Selecting a group of managed permissions
8987

9088
We provide permission groups that are preconfigured and managed by OVHcloud. You can select one or more groups by selecting them from the available list.
9189

@@ -95,7 +93,7 @@ Details of the content of the managed permission groups are available in the [as
9593

9694
Managed action groups can be used in addition to unit actions.
9795

98-
- Adding actions manually
96+
##### 3 - Adding actions manually
9997

10098
If you know the action name, you can add it manually.
10199

@@ -109,7 +107,7 @@ For example, adding `vps:apiovh:ips/*` will grant the following rights:
109107
- **vps:apiovh:ips/delete**
110108
- **vps:apiovh:ips/get**
111109

112-
- Selecting actions from the list
110+
##### 4 - Selecting actions from the list
113111

114112
Finally, you can select actions from the list.
115113

@@ -126,7 +124,27 @@ The available actions depend on the resource type and belong to one of five cate
126124
A search field is available to help identify a specific action on the list.
127125

128126
> [!primary]
129-
> Actions related to IP and vRack products, as well as actions related to ordering and billing, are not yet available in the OVHcloud IAM.
127+
> Actions related to ordering and billing are not yet available in the OVHcloud IAM.
128+
129+
#### Conditions on policies
130+
131+
It's possible to add conditions on IAM policies.
132+
133+
A policy with conditions is valid only if all conditions are validated.
134+
135+
It's possible to add conditions on these elements:
136+
137+
- A resource tag
138+
- The resource name
139+
- The product type
140+
- The IP of the request
141+
- The day of the week
142+
- The date
143+
- The time
144+
145+
![Créer une politique](images/conditions.png){.thumbnail}
146+
147+
Once added, conditions are displayed with the [syntax used on API](/pages/account_and_service_management/account_information/iam-policies-api)
130148

131149
#### Editing a policy
132150

‎pages/account_and_service_management/account_information/iam-policy-ui/guide.en-au.md‎

Lines changed: 27 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: How to use IAM policies using the OVHcloud Control Panel
33
excerpt: "Find out how to give specific access rights to users from an OVHcloud account"
4-
updated: 2025-08-27
4+
updated: 2025-10-27
55
---
66

77
## Objective
@@ -61,8 +61,6 @@ Each policy is displayed with its name, the number of identities linked to it, a
6161

6262
### Managing policies
6363

64-
<a name="create-policy"></a>
65-
6664
#### Creating a policy
6765

6866
Click the `Create a policy`{.action} button.
@@ -77,15 +75,15 @@ The following form will be displayed:
7775
- **Resources**: Add resources or resource groups to be covered by the policy. The resources available are filtered by the product type selected beforehand.
7876
- **Actions**.
7977

80-
There are 4 different ways to add actions:
78+
**There are 4 different ways to add actions:**
8179

82-
- Activating the `Authorise all actions`{.action} option
80+
##### 1 - Activating the "Authorise all actions" option
8381

8482
![Create a policy](images/create_a_policy_02.png){.thumbnail}
8583

8684
When activating this option, you allow all actions related to the selected products. This includes all existing actions as well as actions added in the future for these product types.
8785

88-
- Selecting a group of managed permissions
86+
##### 2 - Selecting a group of managed permissions
8987

9088
We provide permission groups that are preconfigured and managed by OVHcloud. You can select one or more groups by selecting them from the available list.
9189

@@ -95,7 +93,7 @@ Details of the content of the managed permission groups are available in the [as
9593

9694
Managed action groups can be used in addition to unit actions.
9795

98-
- Adding actions manually
96+
##### 3 - Adding actions manually
9997

10098
If you know the action name, you can add it manually.
10199

@@ -109,7 +107,7 @@ For example, adding `vps:apiovh:ips/*` will grant the following rights:
109107
- **vps:apiovh:ips/delete**
110108
- **vps:apiovh:ips/get**
111109

112-
- Selecting actions from the list
110+
##### 4 - Selecting actions from the list
113111

114112
Finally, you can select actions from the list.
115113

@@ -126,7 +124,27 @@ The available actions depend on the resource type and belong to one of five cate
126124
A search field is available to help identify a specific action on the list.
127125

128126
> [!primary]
129-
> Actions related to IP and vRack products, as well as actions related to ordering and billing, are not yet available in the OVHcloud IAM.
127+
> Actions related to ordering and billing are not yet available in the OVHcloud IAM.
128+
129+
#### Conditions on policies
130+
131+
It's possible to add conditions on IAM policies.
132+
133+
A policy with conditions is valid only if all conditions are validated.
134+
135+
It's possible to add conditions on these elements:
136+
137+
- A resource tag
138+
- The resource name
139+
- The product type
140+
- The IP of the request
141+
- The day of the week
142+
- The date
143+
- The time
144+
145+
![Créer une politique](images/conditions.png){.thumbnail}
146+
147+
Once added, conditions are displayed with the [syntax used on API](/pages/account_and_service_management/account_information/iam-policies-api)
130148

131149
#### Editing a policy
132150

‎pages/account_and_service_management/account_information/iam-policy-ui/guide.en-ca.md‎

Lines changed: 27 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: How to use IAM policies using the OVHcloud Control Panel
33
excerpt: "Find out how to give specific access rights to users from an OVHcloud account"
4-
updated: 2025-08-27
4+
updated: 2025-10-27
55
---
66

77
## Objective
@@ -61,8 +61,6 @@ Each policy is displayed with its name, the number of identities linked to it, a
6161

6262
### Managing policies
6363

64-
<a name="create-policy"></a>
65-
6664
#### Creating a policy
6765

6866
Click the `Create a policy`{.action} button.
@@ -77,15 +75,15 @@ The following form will be displayed:
7775
- **Resources**: Add resources or resource groups to be covered by the policy. The resources available are filtered by the product type selected beforehand.
7876
- **Actions**.
7977

80-
There are 4 different ways to add actions:
78+
**There are 4 different ways to add actions:**
8179

82-
- Activating the `Authorise all actions`{.action} option
80+
##### 1 - Activating the "Authorise all actions" option
8381

8482
![Create a policy](images/create_a_policy_02.png){.thumbnail}
8583

8684
When activating this option, you allow all actions related to the selected products. This includes all existing actions as well as actions added in the future for these product types.
8785

88-
- Selecting a group of managed permissions
86+
##### 2 - Selecting a group of managed permissions
8987

9088
We provide permission groups that are preconfigured and managed by OVHcloud. You can select one or more groups by selecting them from the available list.
9189

@@ -95,7 +93,7 @@ Details of the content of the managed permission groups are available in the [as
9593

9694
Managed action groups can be used in addition to unit actions.
9795

98-
- Adding actions manually
96+
##### 3 - Adding actions manually
9997

10098
If you know the action name, you can add it manually.
10199

@@ -109,7 +107,7 @@ For example, adding `vps:apiovh:ips/*` will grant the following rights:
109107
- **vps:apiovh:ips/delete**
110108
- **vps:apiovh:ips/get**
111109

112-
- Selecting actions from the list
110+
##### 4 - Selecting actions from the list
113111

114112
Finally, you can select actions from the list.
115113

@@ -126,7 +124,27 @@ The available actions depend on the resource type and belong to one of five cate
126124
A search field is available to help identify a specific action on the list.
127125

128126
> [!primary]
129-
> Actions related to IP and vRack products, as well as actions related to ordering and billing, are not yet available in the OVHcloud IAM.
127+
> Actions related to ordering and billing are not yet available in the OVHcloud IAM.
128+
129+
#### Conditions on policies
130+
131+
It's possible to add conditions on IAM policies.
132+
133+
A policy with conditions is valid only if all conditions are validated.
134+
135+
It's possible to add conditions on these elements:
136+
137+
- A resource tag
138+
- The resource name
139+
- The product type
140+
- The IP of the request
141+
- The day of the week
142+
- The date
143+
- The time
144+
145+
![Créer une politique](images/conditions.png){.thumbnail}
146+
147+
Once added, conditions are displayed with the [syntax used on API](/pages/account_and_service_management/account_information/iam-policies-api)
130148

131149
#### Editing a policy
132150

0 commit comments

Comments
(0)

AltStyle によって変換されたページ (->オリジナル) /