Skip to content

Commit d8847ac

Browse files
crlptlCyril PETELnerda-codes
authored
feat(iam): fix typo in saml doc and add permission sets (#5662)
* adding missing permission sets for Organization scope * fixing typo * Update pages/iam/reference-content/permission-sets.mdx Co-authored-by: Néda <[email protected]> --------- Co-authored-by: Cyril PETEL <[email protected]> Co-authored-by: Néda <[email protected]>
1 parent c23ce19 commit d8847ac

File tree

2 files changed

+15
-2
lines changed

2 files changed

+15
-2
lines changed

pages/iam/how-to/set-up-identity-federation.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ import Requirements from '@macros/iam/requirements.mdx'
1010
Scaleway supports Identity Federation to provide your teams with secure access to their accounts via Single Sign-On (SSO). Depending on your organization’s requirements, you can use either built-in OAuth2 providers or configure SAML for centralized identity management.
1111

1212
<Message type="important">
13-
SAML SSO login is in Early Access. This means that currenttly, only a few Organizations can access and test the feature.
13+
SAML SSO login is in Early Access. This means that currently, only a few Organizations can access and test the feature.
1414
</Message>
1515

1616
| Feature | **OAuth2** | **SAML** |

pages/iam/reference-content/permission-sets.mdx

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,14 @@ Below is a list of the permission sets available at Scaleway.
1919
| ProjectReadOnly | Read access to Project management. Does not include access to Project resources |
2020
| IAMReadOnly | Read access to IAM. This means list and read access to users, groups, applications, policies, and API keys |
2121
| IAMManager | Full access to IAM. This means access to all possible actions for users, groups, applications, policies and API keys and all ProjectManager permissions |
22+
| IAMApplicationManager | Full access to IAM Applications, including management of Applications API keys |
23+
| IAMApplicationReadOnly | Read access to IAM Applications, including listing Applications API keys |
24+
| IAMUserManager | Full access to IAM Users, including listing Users API keys |
25+
| IAMUserReadOnly | Read access to IAM Users, including listing Users API keys |
26+
| IAMGroupManager | Full access to IAM groups |
27+
| IAMGroupReadOnly | Read access to IAM groups |
28+
| IAMPolicyManager | Full access to IAM policies |
29+
| IAMPolicyReadOnly | Read access to IAM policies |
2230
| BillingReadOnly | List and read access to billing information |
2331
| BillingManager | Full access to billing management. This means access to list, read and edit billing contact information, payment information, billing alerts and invoices |
2432
| OrganizationManager | Full access to Organization management. This means access to all possible actions for Projects, IAM, billing and support/abuse tickets. Does not include access to list and create resources |
@@ -27,7 +35,12 @@ Below is a list of the permission sets available at Scaleway.
2735
| SupportTicketReadOnly | List and read access to support tickets |
2836
| AbuseTicketManager | Full access to abuse tickets. This means access to create, read and update abuse tickets in the Organization |
2937
| AuditTrailReadOnly | List and read access to Audit Trail events |
30-
38+
| AuditTrailExportRead | Read access to Audit Trail exports |
39+
| AuditTrailExportDelete | Delete access to Audit Trail exports |
40+
| AuditTrailFullAccess | Full access to Audit Trail |
41+
| EnvironmentalImpactReadOnly | Read access to Environmental Impact information |
42+
| NotificationManagerFullAccess | Full access to the notification manager |
43+
| NotificationManagerReadOnly | Read access to the notification manager |
3144

3245
<Message type="important">
3346
Any user or application benefitting from the `IAMManager` and/or `OrganizationManager` permission sets is able to create policies giving themselves access to any other actions and resources within the Organization.

0 commit comments

Comments
 (0)