IAM CLI

IMPORTANT: Nested resource groups beyond a single level are a legacy feature that will soon be removed and should already be considered unsupported.

See the Getting Started docs for how to download and log in to the CLI.

evroc uses resourcegroups to organize resources into groups. These can be used to model projects, locations, and an organization’s structure.

Creating nested resource groups beyond a single level is not allowed. Only resource groups directly under the organization root resource group may be created.

Resource groups provide name isolation, i.e. resources with the same names but in different resource groups are allowed.

Creating resourcegroups

$ evroc iam resourcegroup create customer-test
customer-test creation requested

Viewing resourcegroups

$ evroc iam resourcegroup pwd
/ (organization root)

$ evroc iam resourcegroup list
 Name                    Ready   Reason
----------------------- ------- ----------
 customer-test           True    Ready

Navigation into a named resourcegroup is possible using the cd command:

$ evroc iam resourcegroup cd customer-test
Successfully navigated to customer-test

$ evroc iam resourcegroup pwd
/customer-test

Navigating "upwards" in the resourcegroup tree is similarly simple:

$ evroc iam resourcegroup cd ..
Successfully navigated to /

Managing permissions

Currently it is only possible to manage permissions using the API. See IAM API how-to page.