Skip to content

Latest commit

 

History

History
108 lines (84 loc) · 4.72 KB

grant-access-keys.md

File metadata and controls

108 lines (84 loc) · 4.72 KB
copyright lastupdated keywords subcollection
years
2017, 2020
2020-06-15
grant access to keys
key-protect

{:shortdesc: .shortdesc} {:screen: .screen} {:pre: .pre} {:table: .aria-labeledby="caption"} {:external: target="_blank" .external} {:codeblock: .codeblock} {:tip: .tip} {:note: .note} {:important: .important} {:deprecated: .deprecated} {:term: .term}

Granting access to keys

{: #grant-access-keys}

You can enable different levels of access to {{site.data.keyword.keymanagementservicelong}} resources in your {{site.data.keyword.cloud_notm}} account by creating and modifying {{site.data.keyword.cloud_notm}} IAM access policies. {: shortdesc}

As an account admin, determine an access policy type{: external} for users, service IDs, and access groups{: term} based on your internal access control requirements. For example, if you want to grant user access to {{site.data.keyword.keymanagementserviceshort}} at the smallest scope available, you can assign access to a single key in an instance.

Granting access to all keys in an instance

{: #grant-access-instance-level}

You can grant access to keys within a {{site.data.keyword.keymanagementserviceshort}} service instance by using the {{site.data.keyword.cloud_notm}} console.

Review roles and permissions to learn how {{site.data.keyword.cloud_notm}} IAM roles map to {{site.data.keyword.keymanagementserviceshort}} actions. {: tip}

To assign access:

  1. From the menu bar, click Manage > Access (IAM), and select Users to browse the existing users in your account.
  2. Select a table row, and click the ⋯ icon to open a list of options for that user.
  3. From the options menu, click Assign access.
  4. Click Assign users additional access.
  5. Click the IAM services button.
  6. From the list of services, select {{site.data.keyword.keymanagementserviceshort}}.
  7. From the list of service instances, select a {{site.data.keyword.keymanagementserviceshort}} service instance that you want to grant access to.
  8. Choose a combination of platform and service access roles to assign access for the user.
  9. Click Add.
  10. Continue to add platform and service access roles as needed and when you are finished, click Assign.

The image shows an example of how to grant user access to an instance.{: caption="Figure 1. Shows how to grant user access to an instance." caption-side="bottom"}

Granting access to a single key in an instance

{: #grant-access-key-level}

You can also assign access to a single key in a {{site.data.keyword.keymanagementserviceshort}} service instance.

Step 1. Retrieve the key ID

{: #access-key-retrieve-ID}

Retrieve the unique identifer that's associated with the key that you want to grant someone access to.

To get the ID for a specific key, you can:

Step 2. Create an access policy

{: #access-key-create-policy}

Use the retrieved key ID to create a access policy:

  1. From the menu bar, click Manage > Access (IAM), and select Users to browse the existing users in your account.
  2. Select a table row, and click the ⋯ icon to open a list of options for that user.
  3. From the options menu, click Assign access.
  4. Click Assign users additional access.
  5. From the list of services, select {{site.data.keyword.keymanagementserviceshort}}.
  6. From the list of service instances, select the {{site.data.keyword.keymanagementserviceshort}} service instance that contains the key that you want to grant access to.
  7. Enter identifying information about the key.
    1. For Resource type, enter the word "key".
    2. For Resource ID, enter the ID that was assigned to your key by the {{site.data.keyword.keymanagementserviceshort}} service.
  8. Choose a combination of platform and service access roles to assign access for the user.
  9. Click Add.
  10. Continue to add platform and service access roles as needed and when you are finished, click Assign.

The image shows an example of how to grant user access to a key.{: caption="Figure 2. Shows how to grant user access to a key." caption-side="bottom"}