Guide: Managing Roles
This guide describes how to view, create, and manage roles in IAM.
Viewing the Roles List
-
From the left navigation bar, select IAM → Roles.
The roles list page appears.
-
The table includes the following columns:
| Column | Description |
|---|---|
| Name | The identifying name of the role. |
| Type | The role type: System (provided by the system) or Custom (created by users). |
| No. of group | The number of User Groups currently using this role. |
| Description | A description of the role's permissions. |
| Status | The status: Active or Inactive. |
| Created At | When the role was created. |
System Roles
The system provides two built-in default roles that cannot be edited or deleted:
| Role | Scope | Description |
|---|---|---|
| ORG Super Admin | Entire organization | Full administrative rights over all resources and users in the organization. |
| VPC Super Admin | Specific VPC | Full administrative rights over all resources within a VPC. |
Creating a Custom Role
-
On the Roles page, click Create role.
The role creation page appears.
-
Fill in the fields:
| Field | Required | Description |
|---|---|---|
| Role name | Yes | The identifying name of the role. |
| Description | No | A description of the role's purpose or permission scope. |
| Service Type | Yes | The service type to which the permissions apply (e.g., Compute, Network, Storage). |
| Search permission | — | Search for and select the specific permissions to assign to this role. |
| Scope | — | Choose All (all resources) or Specific (specific resources or projects only). |
- Click Save to create the role.
Editing and Deleting Custom Roles
- Edit: Click the role name in the list → update the information → Save.
- Delete: Click the delete icon or select Delete from the action menu → confirm.
Note: System roles (ORG Super Admin, VPC Super Admin) cannot be edited or deleted.