Identity and Access Management
The service allows to manage user identities and control access to virtual machines and other cloud resources.
Google or GitHub accounts
Users don’t need to create additional accounts: to access your Nebius resources, they can use any of their Google or GitHub accounts.
Single Sign-On
Users can log in to Nebius services using Single Sign-On (SSO) with their corporate accounts by configuring user federation with their identity provider.
Inviting users
Users with administrative permissions can invite others to join their tenant. Invitations can be accepted by users logged in via Google, GitHub or corporate SSO.
Service accounts
Users can create service accounts to grant access to cloud resources via service APIs for automation scenarios.
User groups
Users can be organized into groups, each with specific access rights to cloud resources.
Intuitive cloud console for a smooth user experience
Intuitive cloud console for a smooth user experience
Make sure that all operations with resources are run only by users with appropriate permissions.
Questions and answers about IAM
IAM service is designed to help you manage user accounts, control access to resources and configure access rights. You can:
- invite new cloud users,
- manage access rights to resources by adding users to the groups,
- create service accounts — special accounts to manage Nebius resources via API,
- get an IAM token required for authorization via API.