From 8cf60f849b941a0ea98ec118d8363782a9e375fb Mon Sep 17 00:00:00 2001 From: Benedikt Rollik Date: Fri, 7 Nov 2025 14:59:17 +0100 Subject: [PATCH 1/4] docs(ddx): add doc for iam --- ...-iam-members-access-to-dedibox-console.mdx | 96 +++++++++++++++++++ pages/dedibox/menu.ts | 4 + 2 files changed, 100 insertions(+) create mode 100644 pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx diff --git a/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx new file mode 100644 index 0000000000..50c83df3ed --- /dev/null +++ b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx @@ -0,0 +1,96 @@ +--- +title: How to Give IAM Members Access to the Dedibox Console +description: Learn how to set up and manage access control to the Dedibox console for Scaleway IAM members. +tags: dedibox dedicated server x2go +dates: + validation: 2025-11-07 + posted: 2025-11-07 +--- +import Requirements from '@macros/iam/requirements.mdx' + + + +- A Scaleway account logged into the [console](https://console.scaleway.com) +- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization +- Dedibox resources are available in your organization. + +This page explains how to grant IAM members access to the Dedibox Console using Scaleway Identity & Access Management (IAM). + +## Concepts + +Access to Dedibox resources is controlled through IAM: +- **Users**: IAM identities that represent a person or machine. +- **Groups**: Collections of users. Permissions can be assigned at the group level. +- **Policies**: Rules that define what actions a user or group can perform. + +To allow an IAM member to access the Dedibox Console, you must attach a policy to the user or the group they belong to. + +## Giving access to the Dedibox console for Scaleway IAM Members + +### Create or select an IAM user + +If the user does not exist: +1. In the [Scaleway console](https://console.scaleway.com), click **IAM** in the **Management & Governance** section of the side menu. The information dashboard appears. +2. Click **+ Create member**. +3. Enter the user information and validate. + +If the user already exists, proceed to the next section. + +### Create or assign a policy + +To give the user access to Dedibox, attach an IAM policy with Dedibox permissions. +Policies can be created and attached directly to a user or a group. + +#### Create a policy + +1. In the IAM section, click the **Policies** tab. +2. Click **+ Create Policy**. +3. Enter a policy name and description. Optionally, add key-value tags and select a principal. +4. Click **Add rules**. The rule creation wizard appears. +5. Define the scope of the rule — either at the **Project** or **Organization** level — then click **Validate**. +6. Add a permission set to the rule: + - Click **Bare Metal** in the products list. + - Select `DediboxConsoleFullAccess`. +7. Click **Validate** to confirm. +8. Optionally, add a condition using CEL (Common Expression Language). +9. Click **Validate** to confirm, then click **Create policy**. + +### Attach the policy + +You can attach the policy to: +- A **group**, or +- A **user** directly. + +#### Attach to a group + +1. In the IAM section, select **Groups**. +2. Open the desired group. +3. Select the **Policies** tab. +4. Click **Attach Policy**, then choose: + - **Select an unassigned policy** to assign the policy exclusively to the group, or + - **Duplicate an existing policy** to create a copy for the group. +5. Select your previously created policy from the drop-down list and click **Validate**. +6. Ensure the user is a member of this group. + +#### Attach to an user + +1. In the IAM section, select **Users**. +2. Open the user. +3. Click the **Groups & Policies** tab. +4. Scroll to the **Policies** section and click **Attach Policy**, then choose: + - **Select an unassigned policy** to assign the policy exclusively to the user, or + - **Duplicate an existing policy** to create a copy for the user. +5. Select your previously created policy from the drop-down list and click **Validate**. + +### Verify access + +The user can now access the Dedibox Console. + +1. Log in as the user (or ask them to log in). +2. Open the **Dedibox Console**: [https://console.online.net/](https://console.online.net/) + +If permissions are correctly configured, the Dedibox resources will be visible. + + + For further information about Scaleway IAM, refer to the dedicated [IAM documentation](/iam/quickstart/). + \ No newline at end of file diff --git a/pages/dedibox/menu.ts b/pages/dedibox/menu.ts index 00b75b9cb0..3bf00ac179 100644 --- a/pages/dedibox/menu.ts +++ b/pages/dedibox/menu.ts @@ -82,6 +82,10 @@ export const dediboxMenu = { label: 'Terminate a server', slug: 'terminate-dedibox-server', }, + { + label: 'Give IAM Members access to the Dedibox console', + slug: 'give-iam-members-access-to-dedibox-console', + }, ], label: 'How to', slug: 'how-to', From 5b0278be8ba08c3ac5c570935984ea24bb5ac767 Mon Sep 17 00:00:00 2001 From: Benedikt Rollik Date: Fri, 7 Nov 2025 15:21:46 +0100 Subject: [PATCH 2/4] Apply suggestions from code review Co-authored-by: ldecarvalho-doc <82805470+ldecarvalho-doc@users.noreply.github.com> --- .../how-to/give-iam-members-access-to-dedibox-console.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx index 50c83df3ed..4bb22cd31c 100644 --- a/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx +++ b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx @@ -1,5 +1,5 @@ --- -title: How to Give IAM Members Access to the Dedibox Console +title: How to give IAM Members Access to the Dedibox Console description: Learn how to set up and manage access control to the Dedibox console for Scaleway IAM members. tags: dedibox dedicated server x2go dates: @@ -72,7 +72,7 @@ You can attach the policy to: 5. Select your previously created policy from the drop-down list and click **Validate**. 6. Ensure the user is a member of this group. -#### Attach to an user +#### Attach to a user 1. In the IAM section, select **Users**. 2. Open the user. From 7ef960cc6a143108de462b53962a5e31c5e15ef6 Mon Sep 17 00:00:00 2001 From: Benedikt Rollik Date: Fri, 7 Nov 2025 16:20:37 +0100 Subject: [PATCH 3/4] fix(docs): update requirements --- .../how-to/give-iam-members-access-to-dedibox-console.mdx | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx index 50c83df3ed..adffdadd72 100644 --- a/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx +++ b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx @@ -10,8 +10,9 @@ import Requirements from '@macros/iam/requirements.mdx' -- A Scaleway account logged into the [console](https://console.scaleway.com) -- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization + +- A Dedibox account logged into the [console](https://console.online.net) +- Your Dedibox and Scaleway account are [unified](/dedibox/faq/#overview) - Dedibox resources are available in your organization. This page explains how to grant IAM members access to the Dedibox Console using Scaleway Identity & Access Management (IAM). From e1b0b4cd3316f37f42d384d4f246d2059be42674 Mon Sep 17 00:00:00 2001 From: ldecarvalho-doc <82805470+ldecarvalho-doc@users.noreply.github.com> Date: Fri, 14 Nov 2025 10:55:43 +0100 Subject: [PATCH 4/4] fix(ddx): review neda MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Néda <87707325+nerda-codes@users.noreply.github.com> --- .../give-iam-members-access-to-dedibox-console.mdx | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx index 67b0a5315d..573120e3d7 100644 --- a/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx +++ b/pages/dedibox/how-to/give-iam-members-access-to-dedibox-console.mdx @@ -1,5 +1,5 @@ --- -title: How to give IAM Members Access to the Dedibox Console +title: How to give IAM Members access to the Dedibox console description: Learn how to set up and manage access control to the Dedibox console for Scaleway IAM members. tags: dedibox dedicated server x2go dates: @@ -24,7 +24,7 @@ Access to Dedibox resources is controlled through IAM: - **Groups**: Collections of users. Permissions can be assigned at the group level. - **Policies**: Rules that define what actions a user or group can perform. -To allow an IAM member to access the Dedibox Console, you must attach a policy to the user or the group they belong to. +To allow an IAM member to access the Dedibox console, you must attach a policy to the user or the group they belong to. ## Giving access to the Dedibox console for Scaleway IAM Members @@ -76,7 +76,7 @@ You can attach the policy to: #### Attach to a user 1. In the IAM section, select **Users**. -2. Open the user. +2. Click the user you want to attach the policy to. 3. Click the **Groups & Policies** tab. 4. Scroll to the **Policies** section and click **Attach Policy**, then choose: - **Select an unassigned policy** to assign the policy exclusively to the user, or @@ -85,10 +85,10 @@ You can attach the policy to: ### Verify access -The user can now access the Dedibox Console. +The user can now access the Dedibox console. 1. Log in as the user (or ask them to log in). -2. Open the **Dedibox Console**: [https://console.online.net/](https://console.online.net/) +2. Open the **Dedibox console**: [https://console.online.net/](https://console.online.net/) If permissions are correctly configured, the Dedibox resources will be visible.