> For the complete documentation index, see [llms.txt](https://ai-docs.fptcloud.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ai-docs.fptcloud.com/account/iam-on-fpt-cloud-console/tutorials/role-management.md).

# Role Management

## 2.1. Role Management

### 2.1.1. Role Overview

* **Role**: The role of the user within the organization, defining the permissions that the user is capable of performing. 
* Currently, FPT IAM supports two basic roles: **Super Admin** and **Readonly**. Users can create Custom Roles with customizable permissions. 

### 2.1.2. View role list

You can view and manage the list of created roles on the Roles management page. 

To open **Roles Management**, follow these steps: 

* On the FPT Portal, under IAM, select Roles. The system will display a list including both Basic Roles and Custom Roles with the following information: 
* Name, Type (of role), Description, Status, Created at. 
* **Number of groups**: the number of groups currently assigned to the role 
* **Actions**: Delete, Edit Basic Information, Edit Permissions 

<figure><img src="/files/jzO3ImB0JnGTSiSIuJm2" alt=""><figcaption></figcaption></figure>

### 2.1.3 Create and assign permissions to roles

To create a new Custom Role, follow these steps:

{% stepper %}
{% step %}
In the menu, select **IAM > Roles**, then choose Create Role.

<figure><img src="/files/gW69p1i2xOuThZnXEUEW" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
On the **Create role** page, enter the required information

<figure><img src="/files/aK96VwMFEcv2FHtx1a2g" alt=""><figcaption></figcaption></figure>

* **Name**: Choose a name for the role (Required field - Name limits up to 100 characters. Only letters, numbers, underscores, hyphens, spaces, and dots are allowed. - Names cannot be duplicated).&#x20;
* **Description**: Describe the role. This field is optional.&#x20;
* **Permissions**: consists of 3 components&#x20;
* **Service type to be granted permissions**: list of services on the system (compute, storage, networking, etc.)&#x20;
* **Action**: Actions of the feature filtered by service type (e.g., Create Instance, Edit Instance, Delete Instance, etc.)&#x20;
* **Resource**: resources that the authorized user can interact with&#x20;
  {% endstep %}

{% step %}
Select **Service type**

The user clicks on the dropdown list to select the service type

<figure><img src="/files/XALtfbaujUz5eQLK7FCv" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select **Action**

* After the user selects the service type, the system will display a list of actions for that service&#x20;
* The user selects an action to assign permissions&#x20;

<figure><img src="/files/quQRVUd7ibVLTKL8y6MI" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select the resource the user is authorized to act on. There are two options:&#x20;

* **All**: grant permissions for all resources on the tenant (all Projects and VPCs belonging to the tenant)

<figure><img src="/files/U0f3fXaKqhiJCmo51V2b" alt=""><figcaption></figcaption></figure>

* **Specific**: grant permissions to specific resources&#x20;

  * For virtual machine services: users can assign permissions to individual virtual machines&#x20;

  <figure><img src="/files/HDwcvSRadsf6H1WSWMVs" alt=""><figcaption></figcaption></figure>

  * For other services: users can grant permissions at the Project or VPC level

  <figure><img src="/files/ZFvtgOmQCdw9RKQ9Q5Mc" alt=""><figcaption></figcaption></figure>

{% endstep %}

{% step %}
Select **Create**, and the system will proceed to create and notify the result.&#x20;
{% endstep %}
{% endstepper %}

### 2.1.4. View Role Details

{% stepper %}
{% step %}
In the menu, select **IAM > Roles**, and the system will display the Role Management page.
{% endstep %}

{% step %}
Select the role whose information you want to view from the list. The system will display the Name, Description, and Permissions list for the role.&#x20;

<figure><img src="/files/ffFNxRVqthBV9uScmE0t" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

### 2.1.5. Edit Role & Permissions

You can change the information and permissions of Custom Roles by following these steps.

{% stepper %}
{% step %}
In the menu, select **IAM > Roles**. The system will display the Role Management page.

<figure><img src="/files/zAD8QsUuvyRR8FmYlUWR" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select **Action** at the end of the Custom Role you want to update from the list.&#x20;

Select Edit Basic Information or Edit Permissions. &#x20;
{% endstep %}

{% step %}
Change the Role information

* Edit Basic Information

<figure><img src="/files/WmSLo1OUKhrcc130Rn9E" alt=""><figcaption></figcaption></figure>

* Edit Permissions

<figure><img src="/files/xVW1vuITo5HGhaaPZLk9" alt=""><figcaption></figcaption></figure>

**Note: When a role changes, it will affect the access rights of all Users in the User Groups assigned that role.**
{% endstep %}
{% endstepper %}

### 2.1.6 Deleting Roles

For Custom Roles that are no longer needed, you can delete them by following these instructions:

{% stepper %}
{% step %}
In the menu, select **IAM > Roles**, and the system will display the Role Management page.
{% endstep %}

{% step %}
Select **Action** at the end of the Custom Role you want to delete from the list. Select **Delete**.

<figure><img src="/files/oZBJa1jJJfwQC5bMvJJo" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Confirm the warning information in the popup and select **Delete.**

<figure><img src="/files/zKYfpI1gMNs7ZljGtWBx" alt=""><figcaption></figcaption></figure>

**Note: You can only delete a Role from the system if it is not currently associated with any User Group.**
{% endstep %}
{% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://ai-docs.fptcloud.com/account/iam-on-fpt-cloud-console/tutorials/role-management.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.