Team Access
Edge Thunder CNCE uses DT Cloud's Identity & Access Management (IAM) system to control team access. The account owner (root user) can delegate access to specific projects to team members (sub-users).
Roles
| Role | Capabilities |
|---|---|
| Root User | Full Edge Thunder CNCE management: create projects, manage quotas, control lifecycle, assign project access to sub-users |
| Sub-User | Access assigned projects through the provisioning panel: provision and manage resources (VMs, Kubernetes, networking, storage, etc.) within assigned projects |
Assigning Project Access to Sub-Users
To grant a sub-user access to a specific project:
- Navigate to the IAM section in the CMP.
- Select the sub-user you want to grant access to.
- Assign the desired Edge Thunder CNCE project to the sub-user.
Once assigned, the sub-user can access the project's provisioning panel and manage resources within that project.
Sub-users can only access the provisioning panel for their assigned projects. They cannot access the Edge Thunder management screens (project creation, quota management, lifecycle control).
Access Behavior During Lifecycle Changes
- When a project is suspended: Sub-user access to that project is automatically revoked.
- When a project is reactivated: Sub-user access is not automatically restored. The root user must explicitly reassign sub-users to the project.
- When a project is terminated: Sub-user access is permanently removed along with the project.
This behavior is a deliberate security measure to ensure that project access is always explicitly controlled by the root user.
Managing Sub-Users
For detailed information on creating and managing sub-users, refer to the Identity Access Management (IAM) section of this guide.