5
VOTE
Status
Future consideration
Workspace
* IBM Cloud Ideas
Categories
Identity and Access Management
Created by
Guest
Created on
Jun 26, 2023
RELATED IDEAS
Allow more fine grained permissions for Code Engine
Trying to configure a Service ID to just have access to update Secrets (so we can automate certificate renewal). It turns out there is no specific permission for updating secrets, you have to give the Service ID full access to update everything in the project.
Ideally there should be the option to just give a Service ID/User access to what that need, rather than carte blanch access to the project itself.
| Idea priority | High |
| Needed By | Quarter |
By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.
Discussed during weekly requirement screening:
Possible by adding a new role and associate with an operation,
i.e. Secrets Managers -> get/write secret
i.e. Job Submitter -> submit job
The code then needs to check the authorization for a specific operation against the role.
Best to implement next year when permissions and IAM system will be overhauled in general. Moving to parking lot for now, no committed ETA.