Create a role trust in Vultr IAM to define who can assume a specific role. Configure trust relationships for users, groups, organizations, or OIDC issuers.
A role trust defines who is allowed to assume a specific role and under what conditions. Before creating a role trust, you must first create an assumable role. The trust relationship links the role to a trusted entity — a user, a group, or an OIDC issuer — and can include conditions such as IP restrictions, time-of-day limits, and an expiration date.
There are three trust types:
Follow this guide to create a role trust using the Vultr Console, the Vultr API, or Terraform.
A role trust is created as part of the assumable role creation flow.
Log in to the Vultr Console.
Click the organization name in the top navigation bar.
Click Manage Organization.
Click the Roles tab.
Click the + button to add a new role.
Select Assumable Role.
Enter a Name and optional Description for the role.
Under Trusted Entity, select the entity type (User, Group, or OIDC Issuer) and choose the specific entity from the dropdown.
Configure the assumption schedule:
(Optional) Under IP Access Restrictions, enter one or more allowed IP addresses (IPv4 or IPv6) to restrict role assumption to specific source IPs.
In the Permission Policies section, search for and select the policies to attach.
Click Add Role.
The assumable role is created with the trust relationship configured. To view the trust details, click the role name and expand the Role Trust section.
0 Comments
Be the first to comment and share your perspective with the community.