Access Management
In the Governance portal you give users and teams roles. Each role lets them do certain things, in one account or across your whole organization, on all resources or only some.
What you can do
| Task | What it means |
|---|---|
| Manage role assignments | Give a user or team a role, change it or remove it, in an account or the whole organization, on specific resources. Everything else in Governance builds on this. |
| Invite users | Bring people into your organization. Pending invitations are tracked until accepted. |
| Manage teams | Group users so one assignment covers everyone. |
| Create custom roles | Build roles from the permissions that fit your organization. |
| Review logs | See who accessed what, and who changed what. |
The building blocks
- A principal is who gets access.
- A role is what they can do.
- A resource is what they can do it on.
- A scope is where it applies.
- A role assignment ties these together.