FAEN
Log inStart free

IAM and access policiesGA

Precise access, no guessing

Give every member or group exactly the access they need, down to one service, one resource, one SSH command or one Kubernetes namespace.

Start free Open a ticket
Deny
Beats allow
Simulator
Before applying
All products
One policy language
policy.json
{  "Effect": "Allow",  "Action": ["mail:ManageMailboxes"],  "Resource": ["wrn:mail:*:domain/acme.ir"],  "Condition": {"IpAddress": {"wc:SourceIp": "185.1.2.0/24"}}}▍
Live

HOW IT WORKS

How it works

  1. 1

    Policy

    Start from a managed policy or build one in the visual editor.

  2. 2

    Group

    Attach it to a group or a member.

  3. 3

    Simulate

    Test a member’s access to an action.

Capabilities

IAM and access policies

JSON or visual policies

A step editor for service, action and resource, or raw JSON.

Groups

Attach policies to groups and move members.

Explicit deny

Deny always wins over allow, for sensitive resources.

IP and time conditions

Access only from the office network or in working hours.

Simulator

See whether a user can perform an action, and why, before applying.

SSH and Kubernetes

Limit SSH commands and kubectl levels in policy.

Technical specs

Policy language
Effect · Action · Resource · Condition
Conditions
IP, time, MFA
Precedence
Explicit deny > allow
Where
Console → Identity → IAM

MANAGED POLICIES

Start from ready-made policies

Managed policies such as mail admin, read-only or CDN operator stay in sync with WhyCloud updates. Create a custom policy for special cases.

  • Managed policies for every product
  • Policy versions
  • See each policy’s effect on members
whycloud topology WHYCLOUDCONTROL PLANE YOUR DATA CENTER AGENT · VMOPERATOR · K8SAGENT · GPU mTLS · outbound

FAQ

Frequently asked questions

Which services does IAM cover?

Every WhyCloud product, including CDN, DNS, PaaS, secure access, monitoring, SSO and mail.

What about the existing roles (owner, admin, operator, viewer)?

They stay; IAM adds finer access on top of them.

Related services

Security & complianceLayered security with whycloud: Trivy CVE scanning, agent access contr…DevOps as a ServiceManaged registry, tunnels, logs and metrics with a self-service consol…Log ExplorerCollect, search and retain logs from all servers and services in one c…Monitoring & metricsLocal Prometheus and Thanos with live charts in the whycloud console; …

Turn on your own cloud today

Create an account and connect your first server in under five minutes.

Start free Open a ticket