Create and manage sub accounts

Available in Classic and VPC

You can create and manage sub accounts as well as groups and assign policies to sub accounts.

Dashboard interface

In the dashboard, you can change the access-related settings for sub accounts, and check the number of created sub accounts, groups, and policies.

Create sub account

To create sub accounts:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account.
2. In the Sub Accounts menu, click [Create Sub Account].
3. Enter the sub account information.
   • Login ID: ID to use when logging in.
   • User name: Name of the user who will use the sub account.
   • Email: Your email address.
   • Access permission
     • Console access: Set the degree of console access permissions for sub accounts.
       • Accessible from anywhere: Console access is available without any IP restrictions
       • Access restricted to specific IP ranges: You can restrict the IP addresses used to access the console from sub accounts to a specific range. You can register up to 100 IP ranges, including a single IP or subnet.
     • API Gateway access: Set whether to allow access to the API gateway. If allowed, the created sub account can manage the access key and use it to access the API Gateway.
       • Accessible from all sources: Accessible without any IP or VPC server restrictions.
       • Accessible only from specified sources: You can restrict the access sources for sub account API.
         • IP: You can register an IP range, including a single IP or subnet.
         • VPC: VPC currently in use can be registered.
         • VPC Server: You can register a server within the currently used VPC.
   • Two-factor authentication settings: Set whether a two-factor authentication method is required for sub accounts
   • Memo: Brief description of the sub account.
   • Inform password reset: Set to require a password change on first login to the sub account by prompting to visit the password settings page. Not changing the password after initial login directs user to the password settings page for every log in.
4. Enter your login password.
5. If you need to assign a tag to identify the sub account, specify the tag in the [Tag management] section.
6. Click [Create].

Apply policies to sub accounts

A policy defines the permissions that the users logged in as sub account can work on.

To apply policies to sub accounts:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Sub Accounts.
2. Click on the sub account name to access the sub account details page.
3. Click [Add individual permission] in the Policy tab.
   • To apply a policy that allows all operations in the sub account, click [Add all permissions].
     
4. When the Add policy window appears, select the policy to assign to the account.
   • You can select multiple policies.
   • You can search for a policy in the search field at the top right corner of the page.
5. After selecting the policy to assign to the sub account, click [Add].
   
6. Check if the policy has been successfully added.
7. To add a group, click [Add] in the [Group] tab.
   • Learn how to create a group in Create group.

Manage sub account

You can edit or delete sub account information, delete multiple sub accounts at once, and suspend or unsuspend them. If you have Sub Account permissions, you can also log in as a sub account and create a new sub account.

Check sub account details

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Check the details of the sub account.

4. Check the [Policy] tab, [Group] tab, and [Access Key] tab at the bottom of the Details page.
   • [Policy]: Assign or withdraw a policy to a sub account.
   • [Group]: Add or remove a sub account as a member of a group.
   • [Access key]: Enabled only for sub accounts with API Gateway Access included. You can add, delete, use, and suspend Access Key IDs for the use of API gateway.

Edit sub account

To edit sub account information:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Click [Edit] from the top of the Sub account details page.
4. Edit the information and click [Edit].
   • The login ID cannot be edited.

Delete sub account

To delete a sub account:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Click [Delete] from the top of the Sub account details page.
4. When the delete window appears, click [Delete].

Disable sub accounts

The suspend feature puts the account in a state in which NAVER Cloud Platform services cannot be used.

To suspend a sub account:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Sub Accounts.
2. Click the login ID.
3. Click [Disable] from the top of the Sub account details page.
4. When the suspend window appears, click [Disable].
   • Suspended sub accounts show their Status as Suspended.

Set access restrictions for sub accounts

To prevent console access from unauthorized locations, you can set it to be available only within specific IP ranges, and you can limit the resources that can be used by sub accounts.

To restrict console access to a specific IP range:

1. Access with the sub account's details.
2. Click [View/Change allowed IP range] in Access type.
3. Select Allow access from specified IP range, enter the IP, and then click [Add].
   • Clicking [My IP] automatically adds your current IP range.
4. Click [Edit].

To set up an accessible source:

1. Access with the sub account's details.
2. Click [View/Change accessible source] in the access type field.
3. Select Allow access from designated source, and then click [Add].
4. Select the resources to grant access.
   • IP: You can register an IP range, including a single IP or subnet.
   • VPC: VPC currently in use can be registered.
   • VPC Server: You can register a server within the currently used VPC.
5. Click [Apply].
6. Click [Edit].

Manage groups

You can group frequently used sub accounts together. Create, edit, and delete groups or add/delete sub accounts or policies to a group.

Create groups

To create a group and add sub accounts and policies to the group:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Groups.
2. Click [Create groups].
3. When the group creation window appears, enter the group name.
4. If you need to assign a tag to identify the group, specify the tag in the [Tag management] section.
5. Click [Create].
   • The group name can be changed.
6. Once the group is created, click [Add] in the [Sub Accounts] tab.
7. Select the sub account to set as the group and click [Add].
8. Click [Add individual permission] in the [Policy] tab.
9. Once the add policy window appears, select the policy you want to add to the group and click [Add].
   • To grant all permissions at once, click [Add all permissions].

View group details

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Groups.
2. Click the group name.
3. Check group's details.

   Item	Description
   ID	ID automatically assigned when created.
   NRN	Ncloud Resource Names. Resource name.
   Creation date and time	The date and time of group creation.
   Edit date and time	The date and time when group was edited.
   Group name	Name of the group.
   Tag	Assign tag keys/values to easily distinguish. - View, create, edit, and delete all tags with [Tag management]. - Only 1 tag value can be assigned to 1 tag. - When adding a tag value to the previously registered tag key, update the newly entered tag value.

4. Check the [Sub account] and [Policy] tabs at the bottom of the Details page.

• [Sub account]: Add or remove a sub account to be included in a group.
• [Policy]: Add or remove a policy to be applied to a group.

Edit group name

To edit a group name:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Groups.
2. Click > Edit to the right of the group name to be edited in the group list.
3. Edit the group name, and then click [Edit].

Delete groups

To delete a group:

1. From NAVER Cloud Platform console, navigate to Menu > All Services > Management & Governance > Sub Account > Groups.
2. Click > Delete to the right of the group name to be edited in the group list.
3. When the delete window appears, click [Delete].