You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/iam/how-to/manage-groups.mdx
+13-2Lines changed: 13 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -45,14 +45,20 @@ From the groups's [Overview page](#how-to-access-the-group-overview), scroll dow
45
45
2. Select the user you want to add from the drop-down menu, or type the name of the user.
46
46
3. Click **Validate**. You are returned to the group's overview page, where the newly-added user now appears.
47
47
48
+
<Messagetype="important">
49
+
Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
50
+
</Message>
51
+
48
52
### Remove users from a group
49
53
50
54
1. In the **Users** panel, click the **X** button next to the user you want to remove from the group. A pop-up displays asking you to confirm the action.
51
55
2. Click **Remove from group** to confirm.
52
56
<Messagetype="important">
53
-
Removing a user from a group means that any permissions given to them via the group (i.e. from an attached policy) will no longer apply. Be sure you want to remove these permissions from the user before proceeding.
57
+
- Removing a user from a group means that any permissions given to them via the group (i.e. from an attached policy) will no longer apply. Be sure you want to remove these permissions from the user before proceeding.
58
+
- Due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
54
59
</Message>
55
60
61
+
56
62
## How to manage a group's applications
57
63
58
64
From the group's [Overview page](#how-to-access-the-group-overview), scroll to the **Applications** panel. A list of all applications in the group displays.
@@ -80,7 +86,8 @@ From the groups' [Overview page](#how-to-access-the-group-overview), scroll to t
80
86
1. In the **Policies** panel, click the **X** button next to the policy you want to detach from the group. A pop-up displays asking you to confirm the action.
81
87
2. Click **Detach policy** to confirm.
82
88
<Messagetype="important">
83
-
Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the application means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
89
+
- Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the application means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
90
+
- Due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
84
91
</Message>
85
92
86
93
### Attach a policy to a group
@@ -96,6 +103,10 @@ A group may be attached to multiple policies.
96
103
To create a new policy, see our [dedicated how to](/iam/how-to/create-policy/).
97
104
</Message>
98
105
106
+
<Messagetype="important">
107
+
Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
108
+
</Message>
109
+
99
110
## How to delete a group
100
111
101
112
1. From the groups's [**Overview** tab](#how-to-access-the-group-overview), scroll down to the **Delete group** panel.
Copy file name to clipboardExpand all lines: pages/iam/how-to/manage-policies.mdx
+12-3Lines changed: 12 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,7 +42,9 @@ From the policy's [Overview page](#how-to-access-the-policy-overview):
42
42
1. From the policy's [Overview page](#how-to-access-the-policy-overview), scroll down to the **Rules** panel and click <Iconname="edit" /> next to the rule you want to edit.
43
43
2. Edit the rule as required. You can edit the scope, permission sets and conditions.
44
44
<Messagetype="important">
45
-
Conditions can only be edited using the **Advanced** editor. You must update the [CEL](/iam/concepts#common-expression-language-cel) expression in the editor to update the condition. Refer to the [Understanding policy conditions](/iam/reference-content/understanding-policy-conditions) documentation page for more details about how to write condition expressions, as well as examples of conditions.
45
+
Keep in mind that:
46
+
- Conditions can only be edited using the **Advanced** editor. You must update the [CEL](/iam/concepts#common-expression-language-cel) expression in the editor to update the condition. Refer to the [Understanding policy conditions](/iam/reference-content/understanding-policy-conditions) documentation page for more details about how to write condition expressions, as well as examples of conditions.
47
+
- Due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
46
48
</Message>
47
49
3. Click **Validate** to finish.
48
50
<Messagetype="tip">
@@ -54,7 +56,8 @@ From the policy's [Overview page](#how-to-access-the-policy-overview):
54
56
1. Click the **x** button next to the policy you want to detach from the user. A pop-up displays asking you to confirm the action.
55
57
2. Click **Detach policy** to confirm.
56
58
<Messagetype="important">
57
-
Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the user means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
59
+
- Since policies can only be attached to one [principal](/iam/concepts/#principal) at a time, detaching a policy from the user means that the policy becomes orphaned. The policy will remain in your list of policies, but will have no effect until you attach it to another principal.
60
+
- Due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
58
61
</Message>
59
62
60
63
## How to attach another policy to a user
@@ -71,6 +74,10 @@ A user may be attached to multiple policies.
71
74
4. Click **Validate** to finish.
72
75
The selected policy is attached to the user.
73
76
77
+
<Messagetype="important">
78
+
Keep in mind that, due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
79
+
</Message>
80
+
74
81
## How to delete a policy
75
82
76
83
<Messagetype="important">
@@ -81,4 +88,6 @@ A user may be attached to multiple policies.
81
88
2. Click **Delete policy**. A warning displays, asking you to confirm your action.
82
89
3. Type **DELETE** to confirm, and click **Delete policy** to validate.
83
90
84
-
91
+
<Messagetype="important">
92
+
Keep in mind that, due to replication and caching, whenever you update a policy, any new configuration of permission sets may take up to 1 minute to apply.
Copy file name to clipboardExpand all lines: pages/iam/reference-content/policy.mdx
+4Lines changed: 4 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -49,6 +49,10 @@ A permission set consists of one or multiple permissions to perform actions on r
49
49
You can find a detailed list of all permission sets available at Scaleway in the permission sets [reference page](/iam/reference-content/permission-sets/).
50
50
</Message>
51
51
52
+
<Messagetype="important">
53
+
Keep in mind that, due to replication and caching, any new configuration of permission sets may take up to 1 minute to apply.
54
+
</Message>
55
+
52
56
### Conditions
53
57
54
58
A condition is an additional layer of restrictions for your rule. You can allow access to specific user agents or IP addresses, and allow actions to be performed only at certain dates and times. Conditions are defined through [CEL](#common-expression-language-cel) expressions. In general, a condition expression consists of one or more statements that are joined by logical operators (`&&`, `||`, or `!`).
0 commit comments