Skip to content
Products
Platform
Developer Tools
Portal

Create and manage IAM groups

Last updated on

This guide covers creating and managing groups in the STACKIT Portal for an organization. Groups provisioned from an external identity provider using SCIM are read-only in the Portal; manage them in the external provider instead. For details, see SCIM endpoint STACKIT IdP.

Create a group

Section titled “Create a group”
  1. In the STACKIT Portal, open IAM > Groups for your organization.
  2. Select Create Group.
  3. In the General step, enter a Name. A Description is optional.
  4. Review the Overview checkout and select Create. The Create button is unavailable until you enter a name.

After creation, open the group to view its Overview. To add members, use the Members section in the group’s navigation panel.

Review the group overview

Section titled “Review the group overview”

The Overview displays the group’s Name, Description, ID, Origin, Created at date, and whether Is Top level is Yes or No. A top-level group is not a member of another group. Use Copy ID to copy the group ID. Select Edit in the Overview card to update the group, or Delete in the page action bar to delete it.

Edit a group

Section titled “Edit a group”
  1. In the group’s Overview, select Edit.
  2. Update the required Name and, optionally, the Description.
  3. Select Save to apply the changes.

Delete a group

Section titled “Delete a group”
  1. In the group’s Overview, select Delete.
  2. Review the warning. Deleting the group also deletes all of its child groups, and the action cannot be undone.
  3. Type the group’s name in the confirmation field.
  4. Select Delete to confirm.

Manage group members

Section titled “Manage group members”

The Users, Groups, and Service accounts pages are in the group’s Members navigation section. Adding a member follows the same two-step process for all three types:

  1. Open the relevant page under Members.
  2. Select the add button in the page action bar. If the list is empty, use the add button in the empty-state view.
  3. In the selection step, use Filter to find and select entries. Members already in the group are disabled and cannot be selected.
  4. Select Next. In Summary (Step 2/2), review the selection and select Confirm to add the members. Select Back to change the selection or Cancel to stop without adding them.
  5. To remove a member, open the three-dot context menu at the end of its row and select Remove [member type] (for example, Remove user).

Use the search field above the member list to find entries. The member-table columns can be sorted.

When removing a user, the confirmation dialog explains that the user will be removed from this group and can be added again later. Select Remove to proceed or Cancel to keep the user in the group. After removing a group, the Portal displays a success notification; changes may take a few minutes to appear.

Use a group to grant access

Section titled “Use a group to grant access”

You can use a group as the subject of a Cloud Role binding. When adding a group as a subject, identify it by its display name or UUID, not an email address. For cloud-resource role assignment steps, see Assign roles to a user or service account.