{% extends "base.html" %} {% block content %} {% set iam_disabled = 'disabled' if iam_locked else '' %}

Identity & Access Management

IAM Configuration

Create and manage users with fine-grained bucket permissions.

{% if not iam_locked %} {% endif %}
{% if iam_locked %} {% endif %} {% if disclosed_secret %} {% endif %} {% if not iam_locked %}
Configuration Preview {{ config_summary.user_count }} users 
{{ config_document }}

Secrets are masked above. IAM config is encrypted at rest.

{% endif %}
Users

{{ users|length if not iam_locked else '?' }} user{{ 's' if (users|length if not iam_locked else 0) != 1 else '' }} configured

{% if iam_locked %}View only{% endif %}
{% if iam_locked %}
{% else %}
{% if users %} {% if users|length > 1 %}
{% endif %}
{% for user in users %} {% set ns = namespace(is_admin=false, is_expired=false, is_expiring_soon=false) %} {% for policy in user.policies %} {% if 'iam:*' in policy.actions or '*' in policy.actions %} {% set ns.is_admin = true %} {% endif %} {% endfor %} {% if user.expires_at %} {% set exp_str = user.expires_at %} {% if exp_str <= now_iso %} {% set ns.is_expired = true %} {% elif exp_str <= soon_iso %} {% set ns.is_expiring_soon = true %} {% endif %} {% endif %}
{{ user.display_name }}
{% if ns.is_admin %} Admin {% else %} User {% endif %} {% if ns.is_expired %} Expired {% elif ns.is_expiring_soon %} Expiring soon {% endif %}
{{ user.access_key }}
Bucket Permissions
{% for policy in user.policies %} {% set bucket_label = 'All Buckets' if policy.bucket == '*' else policy.bucket %} {% if '*' in policy.actions %} {% set perm_label = 'Full Access' %} {% elif policy.actions|length >= 9 %} {% set perm_label = 'Full Access' %} {% elif 'list' in policy.actions and 'read' in policy.actions and 'write' in policy.actions and 'delete' in policy.actions %} {% set perm_label = 'Read + Write + Delete' %} {% elif 'list' in policy.actions and 'read' in policy.actions and 'write' in policy.actions %} {% set perm_label = 'Read + Write' %} {% elif 'list' in policy.actions and 'read' in policy.actions %} {% set perm_label = 'Read Only' %} {% else %} {% set perm_label = 'Custom (' ~ policy.actions|length ~ ')' %} {% endif %} {{ bucket_label }} ยท {{ perm_label }} {% else %} No policies {% endfor %}
{% endfor %}

No users match your filter.

{% else %}
No users yet

Create your first IAM user to manage access to your storage.

{% endif %}
{% endif %}
{% endblock %} {% block extra_scripts %} {{ super() }} {% endblock %}