Skip to main content

Create and manage groups

In Kakao Cloud IAM, a group is a collection of users who share specific IAM roles.
Using groups allows you to grant or revoke roles for multiple users at once, making permission management more efficient.


Create group​

You can create a new group and configure its users and roles.
Group creation can be performed by users with the Organization Admin or IAM Organization Admin role.

  1. Go to the Kakao Cloud Console > Management > IAM.

  2. In the Groups menu, click Create group.

  3. In the Create group dialog, enter the required information and click Create.

    FieldDescription
    OrganizationThe current organization you are logged into (auto-filled).
    Group nameThe name of the group to create. Duplicate group names cannot be used within the same organization.
    Description (optional)Up to 100 characters allowed.

Manage group IAM permission​

You can assign or remove IAM roles for a group at the organization or project level.
Group IAM permissions can be managed by users with the Organization Admin or IAM Organization Admin role.

  1. Go to the Kakao Cloud Console > Management > IAM.
  2. In the Groups menu, select the target group to open its detail page.
  3. In the IAM roles tab, select either the Organization or Project tab.
  4. To add or modify roles, click Edit roles, select the roles to change, and click Edit.
  5. To remove all roles, click Remove all roles and confirm by clicking Remove in the popup.
info

At least one role must exist within the organization or project.
To remove all roles, use the Remove all roles feature.

Manage group members​

You can add or remove IAM users in a group to manage permissions collectively.
Group membership management can be performed by users with the Organization Admin or IAM Organization Admin role.

Add members​

When a user is added to a group, the IAM roles granted to that group are automatically applied to the user.

  1. Go to the Kakao Cloud Console > Management > IAM.

  2. In the Groups menu, select the group to add members to and open its detail page.

  3. In the Users tab, click Add users.

  4. In the Add users dialog, enter the IAM user ID and click Add.

    • New accounts or service accounts that are not registered as IAM users cannot be added as group members.

Remove members​

When a user is removed from a group, all IAM roles granted through the group are revoked.
For security reasons, the user’s API authentication tokens are immediately invalidated, and they are logged out of the console.
Individually assigned IAM roles are not affected.

  1. Go to the Kakao Cloud Console > Management > IAM.
  2. In the Groups menu, select the group and open its detail page.
  3. In the Users tab, select the users to remove and click Remove.
    • To remove multiple users at once, select their checkboxes and click Remove.
  4. In the Remove user from group popup, type Remove user from group and click Remove to confirm.

Delete group​

You can delete unnecessary groups and revoke their associated permissions in bulk.
Group deletion can be performed by users with the Organization Admin or IAM Organization Admin role.

When a group is deleted, all IAM roles assigned through that group are automatically revoked.
For security reasons, all API authentication tokens of group members are immediately invalidated,
and members are logged out of the Kakao Cloud Console.

  1. Go to the Kakao Cloud Console > Management > IAM.
  2. In the Groups menu, click the More icon next to the target group and select Delete.
  3. In the Delete group popup, type Delete group and click Delete to confirm.