For AI agents: the complete documentation index is available at https://docs.ovhcloud.com/it/llms.txt, the full documentation bundle is available at https://docs.ovhcloud.com/it/llms-full.txt, and this page is available as Markdown at https://docs.ovhcloud.com/it/guides/hosted-private-cloud/powered-by-vmware/vmware-iam-role-policy.md.

IAM for VMware on OVHcloud - How to associate a vSphere role with an IAM policy

Vedi come Markdown

Find out how to link a vSphere role to an IAM policy

Info

IAM is currently in beta phase. This guide can be updated in the future with the advances of our teams in charge of this product.

Objective

This guide details how to create or modify a global IAM policy and add a vSphere role.

Requirements

  • An OVHcloud account.
  • One or more Hosted Private Cloud products - VMware on OVHcloud linked to this account (Hosted Private Cloud powered by VMware, VMware Service Pack).
  • IAM enabled for your Hosted Private Cloud service - VMware on OVHcloud. Follow the steps in the guide IAM for VMware on OVHcloud - How to enable IAM.

OVHcloud Control Panel Access

  • Direct link:
  • Navigation path: Identity, Security & Operations > Policies

Instructions

Creating or editing a policy

OVHCLOUD IAM

Click Create a Policy.
To modify a policy, click the ... button to the right of the policy concerned, then Modify policy.

IAM POLICY

Enter the requested settings:

  • Policy name: Choose a name.
  • Description: Enter a description for your policy.
  • Product types: Hosted private cloud powered by VMware / VMware Service Pack.
  • Resources: Add the resources concerned by your policy (pcc-XX-XX-XX-XX/servicepack, pcc-XX-XX-XX-XX, etc.)
  • Actions: This is where you add your role (see below).

Adding an IAM role to a global policy

When enabling IAM in vSphere, two roles are added by default (iam-admin, iam-auditor).

Copy the roles from the code section below, paste them into the field labeled "Actions added manually" under the “Actions” section, then click the Add + button.

pccVMware:vSphere:assumeRole?iam-admin
pccVMware:vSphere:assumeRole?iam-auditor

If you have created an additional IAM role (after following the steps in the guide “IAM for VMware on OVHcloud - How to create an IAM vSphere role”), you can also add it by copying the code below and adapting it to your role:

pccVMware:vSphere:assumeRole?{role_name}
IAM ACTION ADD

Be sure to click the Add + button to add the action.

Finally, click Create policy (or Modify policy if applicable).

Go further

You can now follow the steps in the guide IAM for VMware on OVHcloud - How to associate a user with a global IAM policy.

IAM for VMware on OVHcloud - Guide index:

For training or technical assistance implementing our solutions, contact your sales representative or visit our Professional Services page to request a quote and have your project analysed by our experts.

Join our community of users.

Questa pagina ti è stata utile?