# Identity and Access Management

Identity and Access Management (IAM) is a framework of policies and technologies used to ensure that the right users (or entities) have the appropriate access to <code class="expression">space.vars.ionos\_cloud</code> resources. It helps you to control your resources securely and authenticate and authorize access users to use resources and your <code class="expression">space.vars.ionos\_cloud</code> account.

## Identity management

When you create an account with <code class="expression">space.vars.ionos\_cloud</code>, you become the contract owner and can access your account using your username and password. To begin with, you login with a sign-in identity and will have access to all the services and resources associated with the account. Ensure that your contract owner credentials are safe.

Next, from your contract owner account, you can set up other users and assign them the roles and resources they need. For example, administrators can have additional permissions, whereas sub-users can have limited permissions.

## Access management

Once you create sub-users, they can log in to the <code class="expression">space.vars.ionos\_cloud</code> account using their credentials. The credentials are validated before authorizing access to the resources and privileges associated with the respective user account.

By managing identities and their access privileges, IAM helps protect sensitive data and systems, reducing the risk of unauthorized access. You can control who can access specific resources and ensure compliance with security standards and regulations for your organization.

## Access permissions

To access **Identity & Access Management** features, select **Menu** > **Management** on the top navigation menu of the DCD. You will see the following features in the drop-down menu:

{% hint style="info" %}
**Note:** The features are subject to access levels based on the user's role.
{% endhint %}

| **Menu item**                                                                                                                                     | **Contract Owner** | **Administrator** |     **User**    |
| ------------------------------------------------------------------------------------------------------------------------------------------------- | :----------------: | :---------------: | :-------------: |
| [<mark style="color:blue;">Users & Groups</mark>](/cloud/set-up-ionos-cloud/management/identity-access-management/user-management.md)             |          +         |         +         |                 |
| [<mark style="color:blue;">Password Policy</mark>](/cloud/set-up-ionos-cloud/management/identity-access-management/password-policy-management.md) |          +         |         +         | + *(read-only)* |
| [<mark style="color:blue;">Token Manager</mark>](/cloud/set-up-ionos-cloud/management/identity-access-management/token-manager.md)                |          +         |         +         |        +        |
| [<mark style="color:blue;">IAM Federation</mark>](/cloud/set-up-ionos-cloud/management/identity-access-management/iam-federation.md)              |          +         |         +         |        +        |

## Quick Links

<table data-view="cards"><thead><tr><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><mark style="color:blue;"><strong>Users &#x26; Groups</strong></mark></td><td>Set user privileges; limit or extend access to chosen roles.</td><td><a href="/pages/9fn1cmTIzNYGaO24oU8L">/pages/9fn1cmTIzNYGaO24oU8L</a></td></tr><tr><td><mark style="color:blue;"><strong>Password Policy</strong></mark></td><td>Create and manage password policy to secure user accounts.</td><td><a href="/pages/dm1pAO8B58uhZ0DiVnKE">/pages/dm1pAO8B58uhZ0DiVnKE</a></td></tr><tr><td><mark style="color:blue;"><strong>Token Manager</strong></mark></td><td>Create, manage, and delete an authentication token using the <strong>API/SDK Authentication Token Manager</strong>.</td><td><a href="/pages/R6Ucezd9ZlydRLmsccrl">/pages/R6Ucezd9ZlydRLmsccrl</a></td></tr><tr><td><mark style="color:blue;"><strong>IAM Federation</strong></mark></td><td>Onboard the organization Identity Provider (IDP) to log in to the DCD using their organization credentials.</td><td><a href="/pages/f4pLDQqbMldCfRi6oIRo">/pages/f4pLDQqbMldCfRi6oIRo</a></td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ionos.com/cloud/set-up-ionos-cloud/management/identity-access-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.