Latest Content

Roles

Updated on 08 April, 2026

Create and manage IAM roles on Vultr. Configure assignable and assumable roles with attached policies to control user and group access to cloud resources.

Role Trusts
Configure role trust relationships in Vultr IAM. Define which users, groups, organizations, or OIDC issuers can assume specific roles in your organization.

How to Create a Role Trust

Create a role trust in Vultr IAM to define who can assume a specific role. Configure trust relationships for users, groups, organizations, or OIDC issuers.

How to Delete a Role Trust

Delete a role trust from a Vultr IAM role. Remove the trust relationship to prevent specified users, groups, or issuers from assuming the role going forward.

How to List Role Trusts for a Specific Role

List all trust relationships configured for a specific IAM role on Vultr. View which users, groups, organizations, or OIDC issuers can assume the role.

How to List Roles a User Can Assume

List all IAM roles that a specific user can assume on Vultr. View available assumable roles based on configured trust relationships through the IAM API.

How to Restore a Deleted Role Trust

Restore a previously deleted role trust in Vultr IAM. Recover the trust relationship to re-enable role assumption for specified users, groups, or issuers.

How to Update a Role Trust

Update an existing role trust in Vultr IAM. Modify trust relationship parameters such as conditions, IP restrictions, or the trusted principal configuration.

Assumed Roles
Manage assumed role sessions in Vultr IAM. Assume roles for temporary elevated access, retrieve session details, and terminate active sessions when complete.

How to Assume a Role

Assume an IAM role on Vultr to gain temporary elevated permissions. Create a time-bound session with the role's policies applied to your API access credentials.

How to Assume a Role Using AWS Security Token Service (STS) Compatibility

Assume a Vultr IAM role using the AWS STS-compatible endpoint. Use existing AWS tooling and SDKs to obtain temporary credentials for Vultr cloud resources.

How to List Active Assumed Role Sessions for a User

List all active assumed role sessions for a specific user in Vultr IAM. View session details including role, expiry time, and status through the IAM API.

How to Retrieve an Assumed Role Session

Retrieve details of a specific assumed role session in Vultr IAM. View the session status, associated role, expiry time, and credentials through the IAM API.

How to Terminate an Assumed Role Session

Terminate an active assumed role session in Vultr IAM. Revoke temporary elevated permissions and end the session before its scheduled expiration timestamp.

Attach Policy to Role
Attach an IAM policy to a role on Vultr. Add permission rules to the role that are inherited by all users and groups assigned to it through the IAM system.
Attach Role to Group
Attach an IAM role to a group on Vultr. All members of the group inherit the permissions from the role's attached policies through the Vultr IAM system.
Attach Role to User
Attach an IAM role directly to a user on Vultr. The user receives all permissions from the role's attached policies through the Vultr IAM system immediately.
Create Role
Create an IAM role on Vultr with assignable or assumable type. Define a reusable permission set by attaching policies that control access to cloud resources.
Delete Role
Delete an IAM role from your Vultr organization. Remove the role and disassociate all attached policies, users, and groups from the role in the IAM system.
Detach Policy from Role
Detach an IAM policy from a role on Vultr. Remove specific permission rules from the role, affecting all users and groups currently assigned to it in IAM.
Detach Role from Group
Detach an IAM role from a group on Vultr. Group members lose the permissions inherited from the role's policies while retaining their direct assignments.
Detach Role from User
Detach an IAM role from a user on Vultr. The user loses all permissions inherited from the role's policies while retaining other directly assigned access.
List Groups for Role
List all groups assigned to a specific IAM role on Vultr. Identify which groups and their members inherit the permissions from the role through the IAM API.
List Policies for Role
List all policies attached to a specific IAM role on Vultr. Review the permission rules that users and groups inherit when assigned to this role via the API.
List Users for Role
List all users assigned to a specific IAM role on Vultr. View which users directly inherit the permissions defined by the role's attached policies via the API.
Restore Role
Restore a previously deleted IAM role on Vultr. Recover the role and its policy attachments to reassign it to users and groups in your organization's IAM.
Update Role
Update an existing IAM role in your Vultr organization. Modify the role name, description, or type configuration through the Vultr API or the Console.