IBM Cloud Docs
Controlling user visibility

Controlling user visibility

There are two ways to change how a user views other users in an account. The first is by using the user list visibility setting. And, the second is for classic infrastructure users, and it is directly related to the parent user that is listed. The assigned parent user determines which users a specific user can view when the setting for user list visibility is enabled.

Setting user view access

As an IBM Cloud® account owner, you can view all users in your account and define how users can view other users in the account. By using the user list visibility setting, you can control how users see others across the account.

When the setting is disabled, any user in the account can view other users from the Users page in IBM Cloud console. When the setting is enabled, users can view only specific types of users in the account:

  • Users invited by the user
  • Users who are their descendants in the classic infrastructure user hierarchy, meaning the users that they invited or that one of their descendants invited.

By default, the setting is disabled for your account. To update this setting, complete the following steps:

  1. In the IBM Cloud console, click Manage > Access (IAM), and select Settings.
  2. From the Account section, enable Restrict user list visibility.
  3. Click Yes to confirm.

Updating a user's parent user

If you have the correct access, you can update the parent for a user. Updating the parent user affects how a user views other users in the account when the setting for user list visibility is enabled. Users can view only other users for which they are a parent and any other users who are invited by those descendants of the parent user.

If you have the following access, you can update the parent for another user:

  • An IAM policy with Editor or higher role on the User management service.
  • You are an ancestor in the classic infrastructure hierarchy for the user and you have the Manage user classic infrastructure permission assigned.

To update a user's parent, complete the following steps:

  1. In the IBM Cloud console, click Manage > Access (IAM), and select Users.
  2. Select a user's name from the list.
  3. From the User details page, select a new parent user from the Parent menu.
  4. Click Apply.