Overview

Service Overview

IAM (Identity and Access Management) is a service that controls the scope of access to services and resources by verifying the identity of users registered on the Samsung Cloud Platform and granting access permissions. Administrators can create and manage users, permission groups, policies, and roles in detail via IAM.

A user, either the Root user or a user who has been granted user registration authority by the Root user, can create a new user. You cannot assign policies directly to a user; instead, by adding the user to a user group and attaching a policy to that group, the user is granted permission to access or manage resources. In other words, the tasks that can be performed within an Account vary depending on which user group a user belongs to and which policies are attached to that user group.

Provided features

IAM provides the following features.

• User Authentication: Provides multi-factor authentication (MFA; Multi-Factor Authentication) for Console and API access. * Additionally, by allowing access only through permitted IP ranges, it blocks unauthorized access by users without permission.
• Permission Management: Add users to user groups according to tasks, limiting their access permissions to the parts required for the work. * Administrators can manage and assign custom policies.
• Role Management: You can switch from your own account to another role to access the Account.
• Credential Provider Provision: You can access and use the Account within the Console via the credential provider.
• Access Control Policy Management: Create access control policies for each service concerning control/action/resource type and authentication method/IP. * Through this, you can apply a least‑privilege policy when granting access to cloud resources, enabling access control based on the user.

Component

Users can create and manage user groups, users, policies through Identity and Access Management(IAM).

User group

In the user group, you can register users and add policies. You can create user groups tailored to each task, register users, and link appropriate policies to grant the same permissions to users and manage them.

User

Administrators can create users and add them to user groups. You can automatically generate or manually create a user’s password, and you can provide the user with connection information for each account.

Policy

You can create policies for the features provided by each service. Permission management is possible based on control type, applied resources, and authentication type.

role

A virtual user account with separate permissions that is not affected by the permissions of the original user account.

Preceding Service

Identity and Access Management (IAM) has no prerequisite services.