Skip to main content

Account template creation - Roles & Access

In this section, you define if leases can define:be shared, if they require approval, and who can manage and approves them.

image.pngimage.png

 

 

On the Roles & Access page it is possible to set a lease to require approval before it is allowed for a user/s to use it.  This is useful in the event that you want to limit this to specific users. You can configure the ability to share a lease with other Users.

Team Sharing
sharing (1)

In the Team Sharing section of the page. A simple toggle that once enabled will require the Manager or Administrator to provide the number of Users it can be shared with. A User will provide the additional Users that a lease can be shared with a the request.

    • Toggle the Enable team access to being configuring the number of Users that a lease can be shared with.
    • Set the Maximum team size to the number of Users to permit per lease.

    Approvals

OnTeam thesize Rolesis: &Owner Access+ page,Number setof Approvaladditional users

 

Approvals (2)

This section lets you define whether an approval is required (1) to Yes.create Then,new inleases the Users (2) or Groups (3) section, click +Add users to select individuals or groups. For each, specify if they will approve, manage users, or both forusing this template.

We recommend requiring approval for leases with extended permissions or that will incur high costs.

  • Set "Approval required" to Yes if you want new lease to be approved by managers before being created.

If no approval is required, new leases are created immediately.

 

Users & Groups (3 & 4)

These sections are set to define who can Approve or Managed leases created for this template:

  • Approver: Users or groups of users who receive approval requests on lease creation and who can approve leases created with this template
  • Manager: Users or groups of users who can manage leases created with this template, that is:
    • View the leases
    • Extend budget and duration
    • Terminate leases
    • Login to the AWS account

Administrators can both approve and manage leases, even if not in this list of users/groups

Groups are defined in IAM Identity Center. image.pngHow to add groups to IAM Identity Center

Back to top