# Identity and Access Management (IAM) for vServer Identity and access management (IAM) for virtual machines is a system for managing and controlling access to virtual machines (VMs) and their resources in a cloud computing environment. It provides a way to control who can access the virtual machine and what actions they can perform on it. Virtual machine IAM typically includes functions such as identity management, authentication, authorization, and auditing. It allows administrators to define policies that specify who can access virtual machines and what actions they can take on virtual machines, such as starting, stopping, or modifying virtual machines. In a cloud computing environment, IAM for virtual machines is an important security control because virtual machines are often used to store sensitive data and run business-critical applications. By controlling access to these resources, IAM for virtual machines helps ensure the security, integrity, and availability of an organization's data and services.

### Overview You need to complete the following steps to be able to use the IAM service for our vServer product: *** ### **Bước 1: Define your requirements:** * Determine the level of access control you need for your server and resources. * Define the roles and responsibilities of different users or groups of users. * Define the permissions and privileges required for each user role or group. *** ### **Step 2: Choose the solution and plan the appropriate IAM strategy** * Research and choose the IAM solution that meets your requirements. * Create a plan to deploy IAM on your servers and resources. * Define policies for user authentication and authorization. *** ### **Step 3: Create a user account (User account) on the system vIAM** After setting up the IAM strategy plan, you need to create a Personal User account on our IAM homepage from your Root user account for each person who needs to access the server: 1. Visit IAM homepage: [click here](https://iam.console.vngcloud.vn/). 2. Open the **User account** tab 3. Select **Create a user account.** 4. n the **Account user name** field, enter a Name for your User account. User account name must be between 5 and 50 characters long and can only contain letters, numbers, underscore (\_), period (.), dash (-). 5. Enter the password for the User account in the **Account password** section (The password must be between 8 and 50 characters long. The password must contain at least 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character), need to set up a password. Strong and unique password for each user account. *** ### **Step 4: Set up a Group** Next you need to create a group of people (Group) based on common roles or responsibilities: 1. Open the **Group tab** at . 2. Select **Create a group.** 3. Enter the Group name in the **Name** field (The name must be from 1 to 50 characters long and can only include letters, numbers, underscores (\_), periods (.), hyphens (-) and spaces. ), then enter the note information in the **Description** field. 4. Go to the next step and assign the appropriate Policy to the user account in the **Policy** section, then assign the appropriate user to the group in the **User** section, with the Users added to the group will have permissions on the selected Policy. in Group *** ### **Step 5: Define access Policies** Create an access policy that specifies what actions each user group or role can take, define detailed permissions to restrict unnecessary access, and regularly review and update access policies. Access when needed: 1. Open the Policy tab at . 2. Select **Create a Policy**. 3. Enter the Group name in the Name field (The name must be from 1 to 50 characters long and can only include letters, numbers, underscores (\_), periods (.), hyphens (-) and spaces. ), then enter the note information in the **Description** field. 4. Go to the next step, select the **vserver** product in the **Product** section, then select the list of permissions for your policy in the **Action** section. 5. Continue to select the resources you want to apply to the selected permissions in the list above in the **Resource** section, here you can choose to all resources or specific resources. 6. Select the necessary conditions to exercise the above rights in the **Request conditions** section. 7. **Create Policy**\ Then assign the created policies to **User accounts** that match the job functions or responsibilities, assign users to roles based on their job functions, thereby grouping **User accounts** with the same permissions in **Group.** \\ For detailed information and meanings of actions (Actions), resources (Resources), and requirements (Request conditions) to set up a complete set of access policies (Policies), please see the content at [Policy configuration page](/vng-cloud-document/vserver/compute-hcm03-1a/identity-and-access-management-iam-for-vserver/actions-resources-and-required-conditions-for-vserver-access-decentralization.md) *** ### **Step 6: Login to vServer by using IAM account (User account)** The final step is to use the IAM User Account to access vServer resources via the vServer portal: 1. Access path: 2. If you haven't signed in with this browser before, the main sign-in page will appear. **Select SIGN IN WITH IAM USER ACCOUNT**. 3. Enter the email address of the Root user when registering a GreenNode account. 4. Enter the **username** and **password** of the IAM user account (User account) created on the vIAM system. 5. Select **SIGN IN WITH IAM USER ACCOUNT**.\ If you have previously signed in as an IAM user account in this browser, your browser may remember the IAM user account address. If so, you should see the screen shown in step 3. After successfully logging in with IAM user account, the main screen of vServer will show the type of user you are using to log in (Root user account or IAM user account). *** ### **Bước 7: Truy cập vào vServer sử dụng IAM account (User account)** Bước cuối cùng là sử dụng **IAM User Account** truy cập vào tài nguyên vServer qua vServer portal: 1. Truy cập vào đường dẫn: 2. Nếu trước đây bạn chưa đăng nhập bằng trình duyệt này, trang đăng nhập chính sẽ xuất hiện. Chọn **ĐĂNG NHẬP VỚI IAM USER ACCOUNT**. 3. Nhập địa chỉ **email** của người dùng Root khi đăng ký tài khoản GreenNode. 4. Nhập **tên người dùng** và **mật khẩu** của tài khoản IAM user account (User account) được tạo trên hệ thống vIAM. 5. Chọn **ĐĂNG NHẬP VỚI IAM USER ACCOUNT**.\ Nếu trước đó bạn đã đăng nhập với tư cách người dùng IAM user account trong trình duyệt này, thì trình duyệt của bạn có thể nhớ địa chỉ tài khoản IAM user account. Nếu vậy, bạn sẽ thấy màn hình hiển thị ở bước 3.\ Sau khi đăng nhập thành công với IAM user account, trên màn hình chính của vServer sẽ thể hiện loại user mà bạn đang sử dụng để đăng nhập (Root user account hay IAM user account). Bạn có thể truy nhập vào tài nguyên đã được phân quyền theo Policy để sử dụng các chức năng của chúng. **Step 7: Access vServer using IAM account (User account)** The last step is to use IAM User Account to access vServer resources via vServer portal: 1. Access the link: 2. If you have not previously logged in with this browser, the main login page will appear. Select LOG IN WITH IAM USER ACCOUNT. 3. Enter the email address of the Root user when registering for a GreenNode account. 4. Enter the username and password of the IAM user account (User account) created on the viIAM system. 5. Select **LOG IN WITH IAM USER ACCOUNT**.\ If you have previously logged in as an IAM user account in this browser, your browser may remember the account address IAM user account. If so, you should see the screen shown in step 3.\ After successfully logging in with the IAM user account, the main screen of vServer will show the type of user you are using to log in (Root user account or IAM user account). You can access the resources that have been authorized according to the Policy to use their functions. *** ### **Step 8: Regularly review and check access rights** * Conduct periodic checks on user access and permissions. * Remove any unnecessary access privileges. * Regularly review user accounts and access policies and change as necessary to ensure they match current requirements. \\ --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.vngcloud.vn/vng-cloud-document/vserver/compute-hcm03-1a/identity-and-access-management-iam-for-vserver.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.