VK Cloud logo
Updated at April 15, 2024   08:50 AM

Access management

Access control operations are available only to the following roles of personal account: owner, superadministrator and user Administrator (IAM). Viewing of project members is also available to the project administrator and viewer.

Viewing project members

  1. Go to VK Cloud personal account.
  2. Click on the user's name in the header of the page.
  3. From the drop-down list, select Manage access.

Login, assigned roles and status are displayed for each member (Yes — the user has joined the project, No — the user did not accept the invitation sent to him).

Viewing the roles involved in the project

  1. Go to VK Cloud personal account.

  2. Click on the user's name in the header of the page, from the drop-down list, select Manage access.

  3. On the access management page, go to the tab Roles.

    The project owner sees in the list all roles except his own, the superadministrator — everything except his own and the owner, the user administrator (IAM) — everything except his own, the owner and the superadministrator.

  4. Click on the role to see who it was assigned to.

    The list shows all the members invited to the role, including those who did not accept the invitation.

Inclusion of mandatory 2FA in the project

For security reasons, you can make two-factor authentication (2FA) mandatory for project members:

  1. Go to VK Cloud personal account.
  2. Enable 2FA for your account, if it is not already enabled.
  3. Click on the user's name in the header of the page, from the drop-down list, select Manage access.
  4. On the access management page, enable the option Mandatory two-factor authentication.

The option can be turned on and off at any stage of the project's life.

Inviting a new member to the project

You can invite both a user who already has an account in VK Cloud, and an unregistered user.

If the user enters the project by invitation, he does not need to confirm the phone number and link the card.

  1. Go to VK Cloud personal account.

  2. Click on the user's name in the header of the page, from the drop-down list, select Manage access.

  3. On the access management page, click Add member.

  4. Enter the email address of the member and select from the list the role you want to assign to him.

    The role of superadministrator can be assigned only by the project owner. The role of User Administrator (IAM) can be assigned only by the project owner or superadministrator. You cannot invite a member to the role of the project owner.

    If a member is assigned multiple roles, their permissions are summed up.

  5. Click the Add user button.

An invitation will be sent to the specified email address, it is valid for 24 hours.

After logging in to the project the new member's status in the column Activated will change to Yes.

Changing member role

A project member cannot change the role for:

  • the owner of the project;
  • myself;
  • a member with the same role as himself.

Only the project owner can assign another role to the superadministrator.

  1. Go to VK Cloud personal account.

  2. Click on the user's name in the header of the page, from the drop-down list, select Manage access.

  3. Expand the menu of the desired project member and select Edit.

  4. In the window that opens, specify the list of new roles in the field User role.

    At least one role should remain in the list.

  5. Click the Save changes button.

Deleting member

The member cannot delete:

  • the owner of the project;
  • myself;
  • a member with the same role as himself.

Only the project owner can delete the superadministrator.

This is a group operation: if necessary, you can delete several members at once by selecting them using the checkboxes.

  1. Go to VK Cloud personal account.
  2. Click on the user's name in the header of the page, from the drop-down list, select Manage access.
  3. Expand the menu of the desired project member and select Delete.
  4. Confirm the deletion.