Atomile Console IAM (Identity and Access Management) provides flexible permission management through policies that define access control rules. These policies determine which actions users can perform across your contracted Atomile products.

Each policy contains permissions defined by a Permission Effect, which specifies whether a user request is Allowed or Denied. In other words, a policy is a collection of permissions that governs various actions within the system.

Function	Description
Grant Permissions	When you attach a policy to a user account, that user receives permissions for all actions included in the policy, either Allowed or Denied.
Revoke Permissions	When you detach a policy from a user account, the user loses all permissions associated with that policy.
Modify Permissions for Multiple Users	Assigning policies to multiple users grants each user the defined permissions. If conflicting permissions exist across multiple policies, where the same action is marked as both Allowed and Denied, Denied always takes precedence.
Manage Control Group Permissions	When granting permissions to manage CDN domains, you must associate a Control Group. This section allows you to customize Control Group associations as needed.

Granting Permissions

Granting Permissions to a Single User

1. Navigate to the Users menu.
2. Click Add Permission for the desired user account.
3. In the Select Policy tab, choose the policy you want to grant.
4. Click OK to apply the permissions.

Revoking Permissions

Removing Permissions from a User

1. Go to the User Management menu.
2. Click the user account you want to modify.
3. Select the Permissions tab.
4. Click Revoke Permission next to the specific permission you want to remove.
5. To remove multiple permissions at the same time, select the checkboxes next to each permission and click Revoke Permission.

Managing Permissions for Multiple Users

Applying Permissions to Multiple Users

1. In the User Management menu, click Add Permission.
2. In the Select Policy tab, select multiple policies to grant.
3. In the Authorized Principal box, choose multiple user accounts to receive the permissions.
4. Click OK to apply the permissions to all selected users.

Managing Control Group Associations

Viewing and Managing Control Groups

1. Navigate to the User Management menu.
2. Click a user account to view its current Associated Control Group status.
3. Select the Control Group tab to view all currently associated Control Groups.

Adding Control Group Associations

• Click Associate Control Group to allow the user to manage the specified CDN domains.

Removing Control Group Associations

• On the User Management page, click Revoke Associated next to the Control Group you want to remove. This removes the user’s permission to manage the related CDN domains.