Identity Hierarchy - User creation and Deletion

Identity Hierarchy - User creation and Deletion


Account Admin

  • With single sign-on (SSO) security settings, Account Admins can invite users to a particular account. Account Admins must add tenants and assign roles to each tenant for a user profile. Additional tenants and roles can be added or deleted anytime from a user profile.
  • Account Admins can access and create account masters in CoreStack.

Provider Admin

  • Users with the Provider Admin role can both access account masters and create account masters.
  • Provider Admins can invite new users and add tenants and roles for existing user profiles.
  • Provider Admins can delegate customer accounts and manage account hierarchy.

Delegation Admin

  • Delegation Admins can access account master in CoreStack and can invite new users.
  • Delegation Admins can invite new users and add tenants and roles for existing user profiles.

    A delegated user would have access to multiple account masters and provided with an option to switch an account master  whenever logging in,


    To perform the deletion of a delegated user you need to switch to root account master and delete the user. If the users are deleted in any of the subsequent account masters an automatic rule will re-create the user again.

    • Related Articles

    • FAQ on Custom Role Creation

      How are Permissions Determined for Custom Roles? Permissions for custom roles are determined based on the role type you select. These permissions are highly flexible and can be tailored to suit your specific use cases. Here's a breakdown: For ...

    • AWS EC2 Instance Tag Restrictions

      When creating an EC2 instance in AWS, the instance name is set as the value of the Name tag. The tag key (Name) and tag value must follow certain conventions. The following basic restrictions apply to tags:Maximum number of tags per resource – 50 For ...

    • Policy Configuration Management

      What is it? Policy Configuration Management allows you to customize policy parameters across CoreStack products — including FinOps, SecOps (Assessments and Standards), and CloudOps — to better fit your cloud governance needs. You can now define ...