Configuring security

This section contains the following topics on configuring security.

Managing projects
A project, sometimes referred to as a tenant, is a unit of ownership. Most resources, such as virtual machines, volumes, and images, belong to a specific project. Only users with a role assignment for a given project can work with the resources belonging to that project. The "ibm-default" project is created during installation, but IBM® Cloud Infrastructure Center supports the creation of additional projects for resource segregation.
IBM Cloud Infrastructure Center UI login
During IBM® Cloud Infrastructure Center installation, the user root on the Linux operating system of management node is assigned the administrator role on the ibm-default project. The root user can log in to IBM Cloud Infrastructure Center and start to perform operations such as assigning roles to other users.
Configuring LDAP
After you have installed IBM Cloud Infrastructure Center, you can optionally configure it to work with an existing Lightweight Directory Access Protocol (LDAP) server.
Managing roles
Roles are used to specify what actions a user can perform. Roles are assigned to a user. A user can have more than one role, in which case they are able to perform any action that at least one of their roles allows.
Configuring operating system users and groups
IBM® Cloud Infrastructure Center uses the local operating system to manage users and groups. To avoid displaying all of the system's users and groups, such as those for system accounts, IBM Cloud Infrastructure Center supports both user and group filtering. Only users and groups that match the corresponding filter are displayed in IBM Cloud Infrastructure Center.

Parent topic: Configuring