Managing IAM access for watsonx Code Assistant for Z
watsonx Code Assistant for Z
Access to watsonx Code Assistant for Z for users in your account is controlled by IBM Cloud® Identity and Access Management (IAM). Every user that accesses IBM watsonx Code Assistant in your account must be assigned an access policy with an IAM role.
To add a user to your instance, you must assign the Editor access role for the user in the deployment space. With this role, the user has full access to view, modify, and create resources, but cannot create users or access policies.
Adding users
The following steps must be completed by the administrator for the instance.
-
In the IBM Cloud console, invite the user to the account for the instance.
You must provide an email address for the user that you want to invite. For more information, see Inviting users in the console.
Specify the following details:
- Service: IBM watsonx Code Assistant
- Resources: All resources
When the user responds to this invitation, they are prompted to sign in to or create an IBM Cloud account. From there, they can create an API key to connect to the instance from their local Visual Studio Code environment.
-
Go to the watsonx user interface.
-
Open the Navigation menu and click Deployments.
-
Go to the Spaces tab and click the Code Assistant Models space that you created during setup.
-
Select the Manage tab and click Access Control.
-
Click Add collaborators and select Add user IDs from the menu.
A list of user IDs that are associated with your account appears.
-
Click the checkbox for the user ID that you want to add and select Editor for the role.
-
Click Add.
-
After the user accepts the invitation that you sent in the first step of this procedure, they can sign in to IBM Cloud and create an API key. The user must then provide this API key in the settings for the Open Z Editor Visual Studio Code extension in their local environment.
For more information, see Setting up your watsonx Code Assistant for Z service in IBM Cloud.
For more information about IAM in IBM Cloud, see Managing access to resources.