Skip to content

Managing identities and groups#

This guide describes how to manage user identities, service identities, and groups from the Lambda Cloud console.

Managing user identities#

Invite a user identity to your account#

If you have an account role with the Identity Invite: Create permission, you can invite users to join the account.

To invite other users to your account:

  1. Navigate to the Users tab on the IAM page in the Lambda Cloud console.
  2. Click Invite new user. A modal appears.
  3. In the Invite teammate dialog, enter the email of the person you'd like to invite.
  4. Click Send invitation to send the invite.

If the invitee accepts the request, they're prompted to join Lambda Cloud. When they join, they become a member of your account and its default workspace, and receive the following roles:

  • Account Member
  • Workspace Member in the default workspace

Delete an invite#

If you have an account role with the Identity Invite: Delete permission, you can delete an invite that was previously sent from your account.

To delete an invite:

  1. Navigate to the Users tab on the IAM page in the Lambda Cloud console.
  2. Find the invite in the identities list. The status column will say Invited.
  3. Click the three-dot icon in its Actions column. A context menu appears.
  4. Click Delete invitation.
  5. If you're sure you want to delete the invite, click Delete.

Remove a user identity from your account#

If you have an account role with the User Identity: Deactivate permission, you can remove other user identities from the account.

To remove a user identity from your account:

  1. Navigate to the Users tab on the IAM page in the Lambda Cloud console.
  2. Find the row containing the user's details, and then click its three-dot menu icon in the Actions column. A context menu appears.
  3. Click Remove member. A modal appears.
  4. Review the warning text.
  5. If you still want to proceed, type remove member into the input field and then click Remove member to finish removing the user.

Managing service identities#

Create a service identity#

If you have an account role with the Service Identity: Create permission, you can create a service identity in your account.

To create a new service identity:

  1. Go to the Service Identities tab on the IAM page in the Lambda Cloud console.
  2. Click Create service identity. A modal appears.
  3. Enter a name for the new identity.
  4. Click Create to create the new identity. On success, you're taken to the identity's details page.

Rename a service identity#

If you have an account role with the Service Identity: Update permission, you can rename an existing service identity in your account.

To rename a service identity:

  1. Go to the Service Identities tab on the IAM page in the Lambda Cloud console.
  2. Find the identity in the list, and then click the row for the identity.
  3. On the identity details page, click Rename.
  4. Replace the existing name.
  5. Click Rename to apply the new name.

Delete a service identity#

If you have an account role with the Service Identity: Delete permission, you can delete an existing service identity from your account.

To delete a service identity:

  1. Go to the Service Identities tab on the IAM page in the Lambda Cloud console.
  2. Find the row of the identity you want to delete, and then click its three-dot menu icon in the Actions column. A context menu appears.
  3. Click Delete service identity. A modal appears.
  4. If you're sure you want to delete the service identity, click Delete to finish deleting it.

Managing groups#

Create a group#

If you have an account role with the Group: Create permission, you can create a new group in your account.

To create a new group:

  1. Navigate to the Groups tab on the IAM page in the Lambda Cloud console.
  2. Click Create new group.
  3. Enter a name for the group.
  4. Click Create group to finish creating the group.

Add an identity to a group#

If you have an account role with the Group Membership: Create permission, you can add an identity to an existing group in your account.

To add an existing identity to a group:

  1. Navigate to the Groups tab on the IAM page in the Lambda Cloud console.
  2. Find the group in the list, and then click its three-dot menu icon in the Actions column. A context menu appears.
  3. Click Manage identities.
  4. Click Add an identity.
  5. Click the Select identity dropdown and select the identity you want to add to the group.
  6. Click Add identity to finish adding the identity to the group.

Remove an identity from a group#

If you have an account role with the Group Membership: Delete permission, you can remove an identity from a group.

To remove an identity from a group:

  1. Navigate to the Groups tab on the IAM page in the Lambda Cloud console.
  2. Find the group in the list, and then click its three-dot menu icon in the Actions column. A context menu appears.
  3. Click Manage identities.
  4. Find the identity you want to remove in the list, and then click its three-dot menu icon in the Actions column. A context menu appears.
  5. Click Remove from group.
  6. If you're sure you want to remove the identity from the group, click Remove to finish removing it.

Rename a group#

If you have an account role with the Group: Update permission, you can rename an existing group in your account.

To rename a group:

  1. Navigate to the Groups tab on the IAM page in the Lambda Cloud console.
  2. Find the group in the list and then click its row.
  3. On the group details page, click Rename. A modal opens.
  4. Enter the new name.
  5. Click Rename to finish renaming the group.

Delete a group#

If you have an account role with the Group: Delete permission, you can delete a group from your account.

To delete a group:

  1. Navigate to the Groups tab on the IAM page in the Lambda Cloud console.
  2. Find the group in the list and then click its row.
  3. On the group details page, click Delete. A modal opens.
  4. If you're sure you want to delete the group, click Delete to finish deleting it.

Note

When you delete a group, its members lose any access they inherited from the group.

Next steps#