Skip to content

Commit 3dc97e0

Browse files
feat(iam): remove guests (#5022)
1 parent a988665 commit 3dc97e0

16 files changed

+81
-250
lines changed

macros/iam/login-member.mdx

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,10 @@
22
macro: login-member
33
---
44

5-
<Message type="important">
6-
Login via [Single Sign-On (SSO)](/account/concepts/#single-sign-on-sso) is currently not available for Members.
7-
</Message>
8-
95
1. Open your web browser and go to the [Scaleway console](https://console.scaleway.com).
106
2. Click [Log in as an IAM Member](https://account.scaleway.com/member-login?redirectToUrl=https://console.scaleway.com/).
117
<Message type="important">
12-
Logging into an Organization as a Member is different from logging in as a Guest or as an Owner. To perform a non-Member login, you can follow the classic [How to log into the console](/account/how-to/log-in-to-the-console) procedure.
8+
Logging into an Organization as a Member is different from logging in as an Owner. To perform a non-Member login, you can follow the procedure described in the [How to log into the console](/account/how-to/log-in-to-the-console) documentation page.
139
</Message>
1410
3. Enter the Organization ID and click **Continue**.
1511
<Message type="important">

menu/navigation.json

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -324,10 +324,6 @@
324324
"label": "Invite a Guest to an Organization",
325325
"slug": "invite-user-to-orga"
326326
},
327-
{
328-
"label": "Accept an invitation to an Organization",
329-
"slug": "accept-invitation-to-orga"
330-
},
331327
{
332328
"label": "Log in as a Member",
333329
"slug": "log-in-as-a-member"
@@ -344,10 +340,6 @@
344340
"label": "Manage API keys",
345341
"slug": "manage-api-keys"
346342
},
347-
{
348-
"label": "Manage users",
349-
"slug": "manage-users"
350-
},
351343
{
352344
"label": "Manage Members",
353345
"slug": "manage-members"

pages/account/faq.mdx

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,6 @@ productIcon: AccountExperienceProductIcon
1515
### My account is locked. What do I do?
1616
If your account is locked, [contact our support team](https://console.scaleway.com/support/tickets/create) to learn the reason for the blockage and discover how to regain access.
1717

18-
### I've been invited to an Organization, but can’t see any resources
19-
When you create a Scaleway account after being invited to join a specific Organization as a [Guest](/iam/concepts/#guest), a personal Organization is automatically created for you.
20-
21-
If you only want to work on the Project you have been invited to, you can switch Organizations and Projects using the drop-down menu on the console dashboard.
22-
2318
### I cannot access my account but I am still being billed
2419

2520
First you must contact the support to help you [unlock your account](/account/troubleshooting/cannot-log-into-my-account/). Once you have regained access, identify what resources are still running and delete them. You can also [close your account](/account/how-to/close-account), and have all your remaining resources automatically shutdown.

pages/account/how-to/change-console-appearance.mdx

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ categories:
1515

1616
You can choose the color scheme of the [Scaleway console](/account/concepts/#console) according to your preferences. We offer a light, dark, darker, or system-based color scheme.
1717

18+
<Message type="note">
19+
This feature is currently not available for [IAM Members](/iam/concepts/#member).
20+
</Message>
21+
1822
<Macro id="requirements" />
1923

2024
- A Scaleway account logged into the [console](https://console.scaleway.com)

pages/account/quickstart.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ Once you have validated your payment method, you can start ordering resources li
3131

3232
Every account has an associated Organization, which in turn has an Owner. When you create your account, you are designated as the Owner of the Organization associated with your account.
3333

34-
When you [close your account](/account/how-to/close-account/), you delete your Organization and all its resources and backups. All the Members you created will cease to exist along with the Organzation. Any Guests who joined the Organization will lose access to it.
34+
When you [close your account](/account/how-to/close-account/), you delete your Organization and all its resources and backups. All the Members you created will cease to exist along with the Organization.
3535

3636
<Message type="important">
3737
There is a delay of up to 10 days between the time your account is closed and the time the system deletes your resources. It is recommended to manually delete all your Organization's resources before closing your account. To reopen your account, [contact support](https://console.scaleway.com/support).

pages/contribute.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ Join the Scaleway **Write for the Community** program, an initiative for making
7474
If you write a tutorial that gets published on our website, you will receive a voucher of **up to €200 cloud credits** in your Scaleway account.
7575

7676
Note that for receiving a reward, you must have:
77-
- Submitted your tutorial idea via a [documentation request issue](https://github.com/scaleway/docs-content/issues/new?assignees=&labels=Documentation+Request&template=doc_request.yaml&title=%5B%F0%9F%91%A9%E2%80%8D%F0%9F%92%BB+Documentation+Request%5D%3A+), which included your [Organization ID](/iam/how-to/accept-invitation-to-orga/) and was approved by our team.
77+
- Submitted your tutorial idea via a [documentation request issue](https://github.com/scaleway/docs-content/issues/new?assignees=&labels=Documentation+Request&template=doc_request.yaml&title=%5B%F0%9F%91%A9%E2%80%8D%F0%9F%92%BB+Documentation+Request%5D%3A+), which included your [Organization ID](/iam/concepts/#organization-id) and was approved by our team.
7878
- Written the content yourself and followed our [contribution process](https://github.com/scaleway/docs-content/blob/main/docs/CONTRIBUTING.md).
7979
- Had your content merged and published by our team.
8080

pages/iam/concepts.mdx

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -52,29 +52,29 @@ A group (also known as an IAM group) is a grouping of [users](#user) and/or [app
5252

5353
You are the [Owner](#owner) of the Organization that is created with your Scaleway account. However, when you are invited to another Organization of which you are not the Owner, you are a **Guest** in that Organization.
5454

55-
Similarly, you can invite other users to be Guests in your Organization. Whereas Owners have full rights and access to all resources and features in their Organization, Guests have only the rights and permissions given to them via [policies](#policy).
56-
57-
<Lightbox src="scaleway-iam-owners-guests.webp" alt="" />
55+
<Message type="important">
56+
Guests will be deprecated by July 2025. From then on, only Members can be created as users of your Organizations, and adding Guests to an Organization will no longer be possible.
57+
</Message>
5858

5959
## IAM
6060

6161
**I**dentity and **A**ccess **M**anagement allows you to share access to the management of your Scaleway [resources](#resource) in a controlled and secure manner.
6262

63-
This is achieved by inviting users to be Guests in your account's [Organization](#organization), and creating [policies](#policy) that define in a very fine-grained way exactly what permissions they should have for which [resources](#resource) in which of your [Projects](#project) or across your whole Organization.
63+
This is achieved by adding Members to your [Organization](#organization), and creating [policies](#policy) that define in a very fine-grained way exactly what permissions they should have for which [resources](#resource) in which of your [Projects](#project) or across your whole Organization.
6464

65-
Similarly, you may participate as a Guest in someone else's Organization, where you will have the precise rights that they accord to you using policies.
65+
Similarly, you may be added as a Member in someone else's Organization, where you will have the precise rights that they accord to you using policies.
6666

6767
You can also create non-human users in your Organization, called [IAM applications](#application), in order to give applications programmatic access to your Scaleway resources.
6868

6969
## Member
7070

71-
You are a Member when you are added to an Organization by an Owner or user with IAM Manager permissions. Members exist only within the specific Organizations in which they are created. This is one of the methods employed at Scaleway to allow Organizations to have multi-users. Members fulfill the same purpose as Guest, while ensuring the security of the Organization.
71+
You are a Member when you are added to an Organization by an Owner or user with IAM Manager permissions. Members exist only within the specific Organizations in which they are created. This is Scaleway's method for allowing Organizations to have multiple users.
7272

73-
As a Member you are subject to [complying with the security requirements](/iam/how-to/comply-with-sec-requirements-member) in effect in your Organization. [Logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is also different from [logging in as a Guest or as an Owner](/account/how-to/log-in-to-the-console).
73+
As a Member you are subject to [complying with the security requirements](/iam/how-to/comply-with-sec-requirements-member) in effect in your Organization. [Logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is also different from [logging in as an Owner](/account/how-to/log-in-to-the-console).
7474

7575
## Organization
7676

77-
An Organization is made of one or several [Projects](#project). When you create your Scaleway account, an Organization is automatically created, of which you are the Owner. You can also be added to an existing Organization as a [Guest](#guest) or as a [Member](#member).
77+
An Organization is made of one or several [Projects](#project). When you create your Scaleway account, an Organization is automatically created, of which you are the Owner. You can also be added to an existing Organization as a [Member](#member).
7878

7979
When you create [IAM rules](#rule), you can set their scope at Organization level. This means you can give access to features managed at Organization level, like billing and IAM, to users, applications, and groups in your Organization.
8080

@@ -86,7 +86,7 @@ The Organization ID identifies the [Organization](#organization) created with yo
8686

8787
## Owner
8888

89-
You are the [Owner](#owner) of the Organization that is created with your Scaleway account. Owners have full rights and access to all resources and features in their Organization. See also [Guest](#guest) and [Member](#member).
89+
You are the [Owner](#owner) of the Organization that is created with your Scaleway account. Owners have full rights and access to all resources and features in their Organization. See also [Member](#member).
9090

9191
## Permission
9292

@@ -157,7 +157,10 @@ Keep in mind that:
157157

158158
A user (also known as an IAM user) is a human user in an Organization. They can be of two types:
159159
- **Owner**: You are the Owner of the [Organization](#organization) that was created with your account.
160-
- **Guest**: You are a Guest when invited to another Organization of which you are not the Owner. Similarly, you can invite other users to be Guests in your Organization.
160+
- **Guest**: You are a Guest when invited to another Organization of which you are not the Owner.
161+
<Message type="important">
162+
Guests will be deprecated by July 2025. From then on, only Members can be created as users of your Organizations.
163+
</Message>
161164
- **Member**: You are a Member when you are added to an Organization by an Owner or user with IAM Manager permissions. Members exist only within the specific Organizations in which they are created.
162165

163166
Within each Organization, different IAM users can have different rights (defined through [policies](#policy)) to perform actions on resources.

pages/iam/how-to/accept-invitation-to-orga.mdx

Lines changed: 0 additions & 71 deletions
This file was deleted.

pages/iam/how-to/manage-members.mdx

Lines changed: 29 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -18,28 +18,45 @@ dates:
1818
## How to create a Member
1919

2020
1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.
21-
2. Click **+ Add user**. A pop-up displays prompting you to choose between creating a **Member** or adding a **Guest**.
22-
3. Select **Member** and click **Continue**.
23-
4. Enter the username of the Member you want to add to your Organization.
21+
2. Click **+ Add user**. A pop-up displays.
22+
3. Enter the username of the Member you want to add to your Organization.
2423
<Message type="important">
25-
When you create a Member, a Scaleway account is created for them. They exist only within your Organization. If you delete the Member, their account is also deleted. Make sure you inform your Members that [logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is different from [logging in as a Guest or as an Owner](/account/how-to/log-in-to-the-console).
24+
When you create a Member, a Scaleway account is created for them. They exist only within your Organization. If you delete the Member, their account is also deleted. Make sure you inform your Members that [logging into an Organization as a Member](/iam/how-to/log-in-as-a-member) is different from [logging in as an Owner](/account/how-to/log-in-to-the-console).
2625
</Message>
27-
5. (Optional) Add a password.
26+
4. (Optional) Add a password.
2827
<Message type="note">
2928
If you set a password, make sure you keep note of it to share it with the Member later. The password will only be shown once. If password renewal is enforced in the Organization, from their first login, the Member must update their password. They must comply with this security requirement within the [grace period](/iam/concepts#grace-period) defined for your Organization.
3029
</Message>
31-
6. (Optional) Check the box if you want to send the password to the Member via email.
32-
7. Click **Next**.
33-
8. Enter the Member's email address.
34-
9. (Optional) Check the box if you want to send a welcome email to the Member.
35-
10. (Optional) Enter the first and last name of the member.
36-
11. (Optional) Assign the member to an existing [IAM group](/iam/concepts/#group)
37-
12. Click **Create Member**.
30+
5. (Optional) Check the box if you want to send the password to the Member via email.
31+
6. Click **Next**.
32+
7. Enter the Member's email address.
33+
8. (Optional) Check the box if you want to send a welcome email to the Member.
34+
9. (Optional) Enter the first and last name of the member.
35+
10. (Optional) Assign the member to an existing [IAM group](/iam/concepts/#group)
36+
11. Click **Create Member**.
3837

3938
<Message type="important">
4039
If you did not send a welcome email to the Member, make sure you give them their login information.
4140
</Message>
4241

42+
## How to access the Member overview
43+
44+
1. Click **IAM & API keys** on the top-right drop-down menu of the Scaleway console. The **Users** tab of the [Identity and Access Management dashboard](https://console.scaleway.com/iam/users) displays.
45+
<Lightbox src="scaleway-iam-users-dashboard.webp" alt="" />
46+
2. Click the name of the user you want to manage. Alternatively, click <Icon name="more" /> next to the user, and select **Overview**. Either way, you are taken to the user's **Overview** tab.
47+
Follow the steps below depending on the management action you wish to take.
48+
49+
## How to view Member information
50+
51+
From the user's [Overview tab](#how-to-access-the-user-overview), you can view information such as:
52+
53+
- **User details** - The user's type (Owner or Member), status, **created on** date, whether they have [MFA](/account/concepts/#multifactor-authentication-mfa) enabled, and the date of their last login.
54+
- **User profile** - The user's username, first and last names, email address, telephone number, preferred language, and their Scaleway ID number.
55+
56+
<Lightbox src="scaleway-user-info.webp" alt="" />
57+
58+
In the Overview tab, you can also find an extensive list of the user's permission sets, the name of their associated policies and the scope they apply to.
59+
4360
## How to lock a Member
4461

4562
As an Owner or user with IAM Manager permissions, you can lock a Member anytime.

0 commit comments

Comments
 (0)