minio/docs
1
0
Fork 0
mirror of https://github.com/minio/docs.git synced 2025-07-28 19:42:10 +03:00
Code Activity

Console does not support logging in with Service Accounts

Browse Source
This commit is contained in:
ravindk89
2021-07-09 17:02:03 -04:00
parent 9473a65a26
commit 9cc4d88f37
1 changed files with 18 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
source/security/minio-identity-management/user-management.rst
View File

@ -47,12 +47,13 @@ the exception of creating :ref:`service accounts
Service Accounts Service Accounts
---------------- ----------------
MinIO service accounts are child identities of a MinIO User. Each MinIO service accounts are child identities of an authenticated MinIO user,
service account inherits its privileges based on the including :ref:`externally managed identities
:ref:`policies <minio-policy>` attached to it's parent user *or* those <minio-authentication-and-identity-management>`. Each service account inherits
groups in which the parent user has membership. Service accounts also support its privileges based on the :ref:`policies <minio-policy>` attached to it's
an optional inline policy which further restricts access to a subset of parent user *or* those groups in which the parent user has membership. Service
actions and resources available to the parent user. accounts also support an optional inline policy which further restricts access
to a subset of actions and resources available to the parent user.
A MinIO user can generate any number of service accounts. This allows A MinIO user can generate any number of service accounts. This allows
application owners to generate arbitrary service accounts for their applications application owners to generate arbitrary service accounts for their applications
@ -61,11 +62,17 @@ service accounts have the same or fewer permissions as the parents,
administrators can focus on managing the top-level parent users without administrators can focus on managing the top-level parent users without
micro-managing generated service accounts. micro-managing generated service accounts.
Service accounts are only available through the :minio-git:`MinIO Console Service accounts creation and management is only available through the
<console>`. After logging into the Console, click :guilabel:`Account` :minio-git:`MinIO Console <console>`. After logging into the Console, click
from the left navigation to view all service accounts associated to the :guilabel:`Account` from the left navigation to view all service accounts
authenticated user. Click :guilabel:`Create Service Account` to create associated to the authenticated user. Click :guilabel:`Create Service Account`
new service accounts. to create new service accounts.
.. admonition:: Service Accounts are for Programmatic Access
:class: dropdown, note
Service Accounts support programmatic access by applications. You cannot
use a Service Account to log into the MinIO Console.
.. _minio-users-root: .. _minio-users-root: