Skip to content

feat(IAM): Add undocumented permission sets #3878

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Oct 24, 2024
Merged

feat(IAM): Add undocumented permission sets #3878

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3bdd364
adding new permission sets
crlptl Oct 24, 2024
a345db1
fix(iam): edit date
ldecarvalho-doc Oct 24, 2024
254ad61
fix(iam): review neda
ldecarvalho-doc Oct 24, 2024
f9cd633
fix(iam): review luiza
ldecarvalho-doc Oct 24, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 17 additions & 1 deletion identity-and-access-management/iam/reference-content/permission-sets.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ content:
h1: Permission sets
paragraph: Explore how to define and manage permission sets for user access control.
dates:
validation: 2024-04-01
validation: 2024-10-23
---

Permissions sets and their scope make up [IAM rules](/identity-and-access-management/iam/concepts/#rule), which define the access rights that a principal (user, group or application) should have. They consist of sets of one or multiple [permissions](/identity-and-access-management/iam/concepts/#permission).
Expand Down Expand Up @@ -52,6 +52,7 @@ Below is a list of the permission sets available at Scaleway.
| KubernetesReadOnly | List and read access to Kubernetes |
| KubernetesFullAccess | Full access to create, read, list, edit and delete Kubernetes |
| KubernetesExternalNodeRegister | Attach external nodes to a Kosmos cluster |
| KubernetesSystemMastersGroupAccess | Gives the Kubernetes system:masters role to perform any action on the cluster |
| DediboxReadOnly | List and read access to Dedibox |
| DediboxFullAccess | Full access to create, read, list, edit and delete Dedibox |
| ContainersReadOnly | List and read access to Containers |
Expand Down Expand Up @@ -80,6 +81,14 @@ Below is a list of the permission sets available at Scaleway.
| PrivateNetworksFullAccess | Full access to create, read, list, edit and delete Private Networks |
| VPCGatewayReadOnly | List and read access to Public Gateways |
| VPCGatewayFullAccess | Full access to create, read, list, edit and delete Public Gateways |
| VPCFullAccess | Full access to VPC |
| VPCReadOnly | Read access to VPC |
| AutoscalingFullAccess | Full access to autoscaling |
| AutoscalingReadOnly | Read access to autoscaling |
| EdgeServicesFullAccess | Full access to Edge Services |
| EdgeServicesReadOnly | Read access to Edge Services |
| IPAMFullAccess | Full access to IPAM |
| IPAMReadOnly | Read access to IPAM |
| LoadBalancersReadOnly | List and read access to Load Balancer |
| LoadBalancersFullAccess | Full access to create, read, list, edit and delete Load Balancer |
| DomainsDNSReadOnly | List and read access to Domains and DNS |
Expand All @@ -96,6 +105,10 @@ Below is a list of the permission sets available at Scaleway.
| TransactionalEmailDomainFullAccess | Full access to domains in Transactional Email. Does not include permissions for e-mails |
| TransactionalEmailEmailReadOnly | Read access to e-mails in Transactional Email. Does not include permissions for domain configuration |
| TransactionalEmailEmailFullAccess | Full access to e-mails in Transactional Email. Does not include permissions for domain configuration |
| TransactionalEmailWebhookFullAccess | Full access to Webhooks in Transactional Email |
| TransactionalEmailWebhookReadOnly | Read access to Webhooks in Transactional Email |
| TransactionalEmailProjectSettingsFullAccess | Full access to Project settings in Transactional Email |
| TransactionalEmailProjectSettingsReadOnly | Read access to Project settings in Transactional Email |
| WebHostingReadOnly | List and read access to Web Hosting |
| WebHostingFullAccess | Full access to create, read, list, edit and delete Web Hosting |
| SecretManagerReadOnly | List and read secrets' metadata (name, tags, creation date, etc.). Does not include permissions for data (versions) accessing or editing |
Expand All @@ -108,3 +121,6 @@ Below is a list of the permission sets available at Scaleway.
| BlockStorageFullAccess | Full access to create, read, list, edit and delete in Block Storage |


<Message type="important">
Some additional permission sets may appear on your Scaleway console if you are enrolled in beta testing for products or features.
</Message>