Access Delegation
- Kadri Kiisk (Unlicensed)
Platform users have the option to share access to their account with another platform user. Delegating access to a chosen trusted user enables the user to act as you and perform all operations on behalf of the user who shared access.
Delegating access
Finding the access sharing form
In order to delegate access to another user a new access has to be created. It can be done from the main menu by selecting ACCESS or from the Dashboard Users Access block.
Create New Access form
Access Types
There are two types of Access on the platform API Token and Delegate Access. By choosing API Token you are able to create an API key which can be used to perform actions via platform API. By choosing Delegate Access you are able to share access to your UI account.
Access Scope
By selecting scope as Restricted, access will be limited to resources belonging to the selected billing account.
By selecting scope as Global, all resources and billing accounts under the platform account can be accessed.
The receiving user
The user who receives the access can be either an existing platform user or not yet existing user. Be aware that it is allowed to add any email address, UI will not show if the receiving user already has an account on the platform or not. Multiple users can be added under the same access group.
If the receiving user already exist:
Receiving user needs to log in to the platform and accept the access invitation. Read more: Receiving user already exists
If the receiving user does not yet exist:
Receiving the user needs to signup up to the platform using the exact same email address as the access was shared to and user needs to accept the access invitation. Read more: Receiving user account does not exist
NB! At the current state of development the receiving user will not get any email notification when access is created!
Access name
Name of the access will be visible only for the user sharing the Access and not for the receiving user. Use a name that helps you to identify the users group who you have given the access.
Shared Acceses
User who shared access will see a list of users who have access to their account. They can also see if the receiving user has accepted the invitation (Status: Accepted) or if the invitation has not yet been accepted (Status: Pending)
Receiving the Access
When a user has been given an access they need first accept the access invitation.
When receiving user already exists
If the user who receives the access is already a platform user they need to accept the access invitation before they can use the Access.
To Accept invitation user needs to log in to platform and they will see a notification that a new access has been shared with them.
Clicking on View More will direct user to the profile view where user can accept the invitation.
Access invitation can be accepted also from the platform dashboard User Access block.
When receiving user account does not exist
It is possible to share access to a user who doesn’t yet have an account on the platform. The user who has given an access needs to first signup to the platform using the same email address that was used for access sharing. The receiving user does not need to add a payment method or make any topups in order to access the platform and start using the sharing.
After signing up to the platform user is directed to the platform Dashboard and the user will see notification that he as a new access share. User will need to accept the invitation as described in here.
For Admins
Be aware that at the current state of development it is not possible to see any access delegations that users have created while you as an Admin are impersonating user.