Service Definition

The evroc Identity and Access Management (IAM) service is in general availability.

Limitations

MFA

Currently IAM service only supports one time password (OTP) as MFA mechanism.

Access control

Currently access control service only supports users to be added as an admin of an organization or a ResourceGroup.
This limitation will be removed once we introduce pre-defined and custom roles, and fine grained permissions.

CLI commands

Currently it is only possible to manage permissions using the API. See IAM API how-to page.

Resources name length restrictions

All resource names are capped at 63 characters. Each name must:

• Only contain lowercase alphanumeric characters, '-'
• Start and end with an alphanumeric character