---
title: How to Attach a Policy to a User
url: https://docs.vultr.com/platform/iam/policies/how-to-attach-a-policy-to-a-user
description: Attach an IAM policy directly to a user on Vultr. Grant the user specific permissions defined in the policy document through the Vultr API or Console.
publish_date: 2026-03-24T19:52:06.264059Z
last_updated: 2026-06-01T21:19:29.196183Z
---

Attaching a policy directly to a user grants them the permissions defined in the policy's document. This is useful when a user needs specific permissions that are not covered by their group or role assignments.

Follow this guide to attach a policy to a user using the Vultr Console, the Vultr API, or Terraform.

=== "Vultr Console"

    1. Log in to the [Vultr Console](https://console.vultr.com).
    1. Click the organization name in the top navigation bar.
    1. Click **Manage Organization**.
    1. Click the **Permission Policies** tab.
    1. Click the name of the policy you want to attach.
    1. In the **Attached Entities** section, click the **+** button.
    1. Search for and select the users you want to attach to this policy.
    1. Click **Attach Entities**.

        The selected users appear in the Attached Entities list and inherit the policy's permissions.

=== "Vultr API"

    1. Send a `GET` request to the [**List Policies** endpoint](https://www.vultr.com/api/#tag/iam/operation/list-iam-policies) to retrieve all policies in your organization.

        ```console
        $ curl "https://api.vultr.com/v2/policies" \
            -X GET \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

        Note the `id` of the policy you want to attach.

    1. Identify the `user_id` of the target user. Follow the steps in [How to List All Users in an Organization](https://docs.vultr.com/platform/iam/organizations/how-to-list-all-users-in-an-organization) to retrieve user IDs.

    1. Send a `POST` request to the [**Attach Policy to User** endpoint](https://www.vultr.com/api/#tag/iam/operation/attach-iam-user-to-policy) to attach the policy. Replace `{policy-id}` with the policy id and `{user-id}` with the user id.

        ```console
        $ curl "https://api.vultr.com/v2/policies/{policy-id}/users/{user-id}" \
            -X POST \
            -H "Authorization: Bearer ${VULTR_API_KEY}"
        ```

        A successful request returns an HTTP `201 Created` response.

=== "Terraform"

    1. Ensure the [Vultr Terraform provider](https://registry.terraform.io/providers/vultr/vultr/latest/docs) is configured in your Terraform project.

    1. Define the policy-user attachment resource. Use Terraform references if the policy and user are managed in the same configuration, or replace with literal IDs.

        ```hcl
        resource "vultr_organization_policy_user_attachment" "policy-user-attachment" {
          policy_id = vultr_organization_policy.my_policy.id
          user_id   = vultr_user.new_user.id
        }
        ```

    1. Apply the configuration.

        ```console
        $ terraform apply
        ```

        Verify that the output shows `vultr_organization_policy_user_attachment.policy-user-attachment: Creation complete`.