Skip to content

Latest commit

 

History

History
60 lines (34 loc) · 2.96 KB

wca-iam.md

File metadata and controls

60 lines (34 loc) · 2.96 KB
Raw
copyright lastupdated keywords subcollection
years
2023, 2024
2024-11-04
security, identity management, privileges, access, IAM
watsonx-code-assistant

{{site.data.keyword.attribute-definition-list}}

Managing IAM access for {{site.data.keyword.wcaz_short}}

{: #wca-iam}

[{{site.data.keyword.wcaz_short}}]{: tag-dark-teal}

Access to {{site.data.keyword.wcaz_short}} for users in your account is controlled by {{site.data.keyword.iamlong}} (IAM). Every user that accesses {{site.data.keyword.wca_full_notm}} in your account must be assigned an access policy with an IAM role. {: shortdesc}

To add a user to your instance, you must assign the Editor access role for the user in the deployment space. With this role, the user has full access to view, modify, and create resources, but cannot create users or access policies.

Adding users

{: #add-user}

The following steps must be completed by the administrator for the instance.

  1. In the {{site.data.keyword.cloud_notm}} console, invite the user to the account for the instance.

    You must provide an email address for the user that you want to invite. For more information, see Inviting users in the console{: external}.

    Specify the following details:

    • Service: {{site.data.keyword.wca_full_notm}}
    • Resources: All resources

    When the user responds to this invitation, they are prompted to sign in to or create an {{site.data.keyword.cloud_notm}} account. From there, they can create an API key{: external} to connect to the instance from their local Visual Studio Code environment.

  2. Go to the watsonx user interface{: external}.

  3. Open the Navigation menu and click Deployments.

  4. Go to the Spaces tab and click the Code Assistant Models space that you created during setup.

  5. Select the Manage tab and click Access Control.

  6. Click Add collaborators and select Add user IDs from the menu.

    A list of user IDs that are associated with your account appears.

  7. Click the checkbox for the user ID that you want to add and select Editor for the role.

  8. Click Add.

  9. After the user accepts the invitation that you sent in the first step of this procedure, they can sign in to {{site.data.keyword.cloud_notm}} and create an API key{: external}. The user must then provide this API key in the settings for the Open Z Editor Visual Studio Code extension in their local environment.

For more information, see Setting up your {{site.data.keyword.wcaz_short}} service in {{site.data.keyword.cloud_notm}}.

For more information about IAM in {{site.data.keyword.cloud_notm}}, see Managing access to resources{: external}.