Create and manage sub accounts

Available in Classic and VPC

You can create and manage sub accounts as well as groups and assign policies to sub accounts.

Dashboard interface

In the dashboard, you can change the access-related settings for sub accounts, and check the number of created sub accounts, groups, and policies.

Create sub accounts

To create sub accounts:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account.
2. In the Sub Accounts menu, click [Create Sub Account].
3. Enter the sub account information.
   • Login ID: ID to use when logging in.
   • User name: Name of the user who will use the sub account.
   • Email: Your email address.
   • Access permission
     • Console access: Degree of console access permissions for sub accounts.
       • Accessible from anywhere: Access is available without any additional IP restrictions.
       • Accessible from a designated IP range: You can restrict the IP range of a sub account's console access. You can register up to 100 IP ranges, including a single IP or subnet.
     • API Gateway access: Set whether to allow access to the API Gateway. If allowed, the created sub account can manage the access key and use it to access the API Gateway.
       • Accessible from all sources: Accessible without separate IP/VPC server restrictions.
       • Accessible from designated sources: You can restrict the access sources for a sub account's API access.
         • IP: You can register an IP range, including a single IP or subnet.
         • VPC: VPC currently in use can be registered.
         • VPC Server: You can register a server within the currently used VPC.
   • Two-factor authentication option: Set requirement for two-factor authentication of sub accounts.
   • Memo: Brief description of the sub account.
   • Inform password reset: Set to require a password change on first login to the sub account by prompting to visit the password settings page. Not changing the password after initial login directs user to the password settings page for every log in.
4. Enter your login password.
5. If you need to assign a tag to identify the sub account, specify the tag in the [Tag management] section.
6. Click [Create].

Apply policies to sub accounts

A policy defines the permissions that the users logged in as sub account can work on.

To apply policies to sub accounts:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Sub Accounts.
2. Click on the sub account name to access the sub account details page.
3. Click [Add individual permission] in the Policy tab.
   • To apply a policy that allows all operations in the sub account, click [Add all permissions].
     
4. When the Add policy window appears, select the policy to assign to the account.
   • You can select multiple policies.
   • You can search for a policy in the search field at the top right corner of the page.
5. After selecting the policy to assign to the sub account, click [Add].
   
6. Check if the policy has been successfully added.
7. To add a group, click [Add] in the [Group] tab.
   • Learn how to create a group in Create group.

Manage sub accounts

You can edit or delete sub account information, delete multiple sub accounts at once, and suspend or unsuspend them. If you have Sub Account permissions, you can also log in as a sub account and create a new sub account.

View sub account details

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Check the details of the sub account.

4. Check the [Policy] tab, [Group] tab, and [Access Key] tab at the bottom of the Details page.
   • [Policy]: Assign or withdraw a policy to a sub account.
   • [Group]: Add or remove a sub account as a member of a group.
   • [Access key]: Enabled only for sub accounts with API Gateway Access included. You can add, delete, use, and suspend Access Key IDs for the use of API gateway.

Edit sub accounts

To edit sub account information:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Click [Edit] from the top of the Sub account details page.
4. Edit the information and click [Edit].
   • The login ID cannot be edited.

Delete sub accounts

To delete a sub account:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Click [Delete] from the top of the Sub account details page.
4. Click [Delete] once the delete window appears.

Disable sub accounts

The suspend feature puts the account in a state in which NAVER Cloud Platform services cannot be used.

To suspend a sub account:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Click [Disable] from the top of the Sub account details page.
4. When the suspend window appears, click [Disable].
   • Suspended sub accounts show their Status as Suspended.

Set access restrictions for sub accounts

To prevent console access from unauthorized locations, you can set it to be available only within specific IP ranges, and you can limit the resources that can be used by sub accounts.

To restrict console access to a specific IP range:

1. Access with the sub account's details.
2. Click [View/Change allowed IP range] in Access type.
3. Select Allow access from specified IP range, enter the IP, and then click [Add].
   • Clicking [My IP] automatically adds your current IP range.
4. Click [Edit].

To set up an accessible source:

1. Access with the sub account's details.
2. Click [View/Change accessible source] in the access type field.
3. Select Allow access from designated source, and then click [Add].
4. Select the resources to grant access.
   • IP: You can register an IP range, including a single IP or subnet.
   • VPC: VPC currently in use can be registered.
   • VPC Server: You can register a server within the currently used VPC.
5. Click [Apply].
6. Click [Edit].

Manage groups

You can group frequently used sub accounts together. Create, edit, and delete groups or add/delete sub accounts or policies to a group.

Create groups

To create a group and add sub accounts and policies to the group:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Groups.
2. Click [Create groups].
3. When the group creation window appears, enter the group name.
4. If you need to assign a tag to identify the group, specify the tag in the [Tag management] section.
5. Click [Create].
   • The group name can be changed.
6. Once the group is created, click [Add] in the [Sub Accounts] tab.
7. Select the sub account to set as the group and click [Add].
8. Click [Add individual permission] in the [Policy] tab.
9. Once the add policy window appears, select the policy you want to add to the group and click [Add].
   • To grant all permissions at once, click [Add all permissions].

View group details

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Groups.
2. Click the group name.
3. Check group's details.

   Item	Description
   	ID
   	NRN
   	Creation date and time
   	Edit date and time
   	Group name
   	Tag

4. Check the [Sub account] and [Policy] tabs at the bottom of the Details page.

• [Sub account]: Add or remove a sub account to be included in a group.
• [Policy]: Add or remove a policy to be applied to a group.

Edit group name

To edit a group name:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Groups.
2. Click > Edit to the right of the group name to be edited in the group list.
3. Edit the group name, and then click [Edit].

Delete groups

To delete a group:

1. In the NAVER Cloud Platform console, navigate to > Services > Management & Governance > Sub Account > Groups.
2. Click > Delete to the right of the group name to be edited in the group list.
3. Click [Delete] once the delete window appears.