Functional description
This page provides detailed information about all components of the evroc IAM service. For a high-level overview, see the IAM overview.
The evroc IAM service lets you organize your cloud resources and control who can access them. You can create projects to group resources, and use role bindings to grant users and service accounts access.
Organizations
An organization is the top-level entity in your evroc account. It represents your company or team and provides a unified way to manage access, billing, and policies across your environment.
All projects and users belonging to an organization exist within this entity.
Projects
Projects are isolated containers for your cloud resources. Use projects to organize resources by team, environment, application, or any structure that fits your needs.
Each project has:
- Its own set of resources (VMs, storage, networking)
- Independent role bindings for access control
- Isolated billing and quota tracking
Fine-grained access
Fine-grained access grants predefined roles to users and service accounts. Roles contain permissions, and role bindings attach those roles to principals on a project or organization scope.
Use role bindings when you need to grant service-specific or resource-specific access.
For the full role and permission reference, see permissions and roles.
Use role bindings when you need to grant service-specific or resource-specific access.