How to Create a Role

1 min readUpdated 23 October 2026

Create an assignable or assumable Vultr IAM role that bundles policies, via Console, API, or Terraform.

Roles in Vultr's IAM system define a set of permissions that can be assigned to users or groups. Roles contain policies that specify what actions are allowed or denied on which resources.

There are two types of roles:

Assignable roles provide permanent access and are attached directly to users or groups. Use assignable roles for day-to-day permissions that users need continuously.
Assumable roles provide temporary, elevated access through time-bound sessions. Assumable roles support IP restrictions and trust-based assumption (by user, group, organization, or OIDC issuer). Use assumable roles for privileged operations that follow the principle of least privilege.

Follow this guide to create a role using the Vultr Console, the Vultr API, or Terraform.

Log in to the Vultr Console.
Click the organization name in the top navigation bar.
Click Manage Organization.
Click the Roles tab.
Click the + button to add a new role.
Select Assignable Role or Assumable Role based on your requirement.
Enter a Name and optional Description for the role.
For an assumable role, configure the Trusted Entity (User, Group, or OIDC Issuer) and set the assumption schedule (Always, Specific times or Specific days).
In the Permission Policies section, search for and select the policies to attach to this role.
Click Add Role.
The new role appears in the Roles list.

0 Comments

Start the conversation

Be the first to comment and share your perspective with the community.