Assign roles to a user or service account

Before a service account can be used, it must have assigned the necessary roles. We recommend not assigning project administrator rights to service accounts. Instead, grant them only the minimum privileges required to perform their tasks, ensuring strong security.

STACKIT Portal

1. Navigate to access management by selecting IAM and management > Access.

2. Select Grant Access.

3. Enter the identifier of the user or user group in the Subject field and select + Add. The system offers auto-completion for existing account members.

   While normal users and service accounts are identified via email address, user groups are identified via display name or UUID. If you try to add a user group via email address, you will create a new user account for the email address instead of adding the group.

4. Select the role from the dropdown menu. You can assign multiple roles via + Add new role

5. Click Save.

STACKIT API

Refer to the Membership API documentation in the API Explorer.