Assign and revoke Directory Roles

Use this guide to manage built-in Directory Role assignments for identity-directory operations. Directory Roles are separate from Cloud Roles and do not grant access to cloud resources. To grant cloud-resource access, see Assign Cloud Roles to a user or service account.

You need the Directory Role role-writer or administrator to assign roles. role-writer can assign and revoke existing built-in Directory Roles; custom Directory Roles cannot currently be created.

Assign a role

1. In the STACKIT Portal, open IAM > Directory Roles, then select Roles.
2. Select the built-in role you want to assign.
3. In the role navigation, select Assignments.
4. Select Add assignment.
5. In Step 1, search for a subject using Enter subject name. Select the subjects you want to assign from the Name and Type list. Subjects that already have the role are disabled. Select Next.
6. In Step 2, review the subject count and the Name and Type summary. Select I acknowledge the impact of assigning this role to the selected subjects. to enable Confirm Assignment, then select it to submit the assignment.

Revoke an assignment

1. In the STACKIT Portal, open IAM > Directory Roles, then select Roles.
2. Select the role whose assignment you want to revoke, then select Assignments.
3. Find the subject in the assignments list. Use Filter to narrow the list if needed.
4. On the subject’s row, open the three-dot context menu and select Revoke assignment.
5. Confirm the revocation when prompted.