IAM and organizations on

Overview of the Chainguard IAM model

Fri, 15 Jul 2022 15:22:20 +0100

Chainguard’s identity and access management (IAM) model enables more secure, fine-grained control over container registries and security resources, using familiar concepts from cloud providers like AWS and GCP. This enterprise-grade IAM system allows organizations to implement least-privilege access, delegate permissions, and integrate with existing identity providers for seamless authentication and authorization.

Organizations and folders

Chainguard’s IAM model consists of two structures: Organizations and Folders. An organization is a customer or group of customers working with the same Chainguard resources, while a folder is a collection of resources within a Chainguard organization.

How to manage Chainguard IAM organizations

Fri, 15 Jul 2022 15:22:20 +0100

Chainguard provides a rich Identity and Access Management (IAM) model similar to those used by AWS and GCP. This guide outlines how to manage Chainguard’s IAM structures with the chainctl command line tool.

Note: You should work with Chainguard’s Customer Success team to create or delete organizations. This will help to ensure that no users lose access to resources and that your IAM structure is configured correctly.

Logging in

To authenticate into the Chainguard platform, run the following login command.

Verified organizations

Tue, 15 Aug 2023 14:22:23 -0700

The Chainguard platform organizes resources in a hierarchical structure called IAM organizations. A customer typically uses one root-level organization to manage its Chainguard resources.

About verified organizations

A verified organization is a root-level organization whose name Chainguard has confirmed and reserved for you. Only one organization on the Chainguard platform can hold a given verified name. Because of that, you can use the name anywhere you would otherwise use the organization’s unique ID.

Roles and role-bindings

Thu, 16 Jan 2025 15:22:20 +0100

Documentation and resources on roles and role-bindings within the context of the Chainguard platform.