Server tags and workspace members
The workspace settings at your UpCloud control panel provide advanced access control opportunities for teams. You as the account owner can create and manage additional workspace accounts with their own access rights. Your workspace members get their own account names and passwords, with access to specific servers based on servers, storages, or server tags, that you can assign freely.
New workspace members can use an email address already attached to another UpCloud account. There are no limits on the number of members in a workspace or to how many workspaces a member can belong to.
Tags and members
The server tag system allows you to categorise and filter your server listing according to the tags. Each server can have multiple tags, which are simple single word group names consisting of letters or numbers. You can, for example, tag your database servers with #mysql or development environments with #dev. It is all up to you to choose the tags which best describe your cloud servers.
The tags are not just for show either, you can use them together with your workspace settings to specify who gets to access which server. Adding a tag to the subaccount access rights gives that user control over the servers indicated by the same tag. The tags together with the server and storage specific access rights form a versatile but easy to manage user access control for your workspace members.
To get started with server tags, log in to your UpCloud control panel and open the settings page for the server you wish to tag. In the server overview, you will find the Tags section around the middle of the page. The tags assigned to your server will appear in that section, but for now, you will only see the Edit button, click it to add a new tag.
In the tag editing mode you can simply type in the tag you would like to assign and press enter to create the tag. The tag can be any single group of alphabets and numbers up to a maximum of 32 characters, so you can get creative with your tags. If you have already tagged another server before, entering pre-existing tag names will auto-complete to the same appearance to help keep tag names consistent throughout of your servers.
Once you are done adding new tags to that server, click Done to save the changes.
After adding new tags to your server, the tags will show up in the same Tags section at your server overview. But this is just a small part of the usage of the tags.
Next, go back to your Servers list. The same tags you just added now appear at your servers list under the Tags column.
The tags allow you to filter the list of your servers to only show those with specific tags assigned to them. Try clicking one of the tags to see how the filtering works. Notice that you can select multiple tags at the same time to further narrow down your list. Selecting a tag to filter by will highlight all the same tags on each of the servers that have it, this way you can easily perform bulk action commands to certain types of servers. Click the selected tags again to clear filtering and show all of your servers.
Managing workspace members
Your UpCloud account can have multiple additional workspace members that log in with their own username and password. Adding members can be extremely useful for collaborative work, many kinds of group projects, or just temporarily giving someone access to your server management without sharing your login details.
To start with sharing your account, log into your UpCloud control panel and open People tab. In this view, you can create new accounts to share your workspace. Click the Add button at the top right of the list, this will open a new user profile form.
Enter the following minimum information to create a new user:
- First name
- Last name
- Email address
- Phone number
After filling in the user details, take a look at the access permissions. Here you have three ways to control the servers the new user has access to.
Access control allows you to optionally assign user rights to specific server IDs. Select the desired server on the left Available servers list and move it to the Allowed list by clicking the Add button. If the user should be able to take backups, attach and remove storage drives on the allowed servers, select the checkbox under the allowed servers list.
It is also possible to give the user access to all the servers on your Group Account by selecting the checkbox above the servers list.
Storage options are a supplementary way to give access only to specific storage devices. This works in conjunction with the other two access control options. You can restrict user access to only specific storage devices attached to those servers the subaccount otherwise has access to.
Like with the servers, you can give a blanket permission to all storage disks by selecting the checkbox above the storage list.
Tags are the primary option to specify access control using the tags you have assigned to your servers. Type in the tag names the user should be allowed access to and press enter. Under the tags list, you will see a checkbox to confirm access also to the storage devices attached to the servers with those tags.
If you would wish to give the new user blanket access to all server and storage, click the All toggle switch in the server section and the same All toggle in the disk access.
Once you are done setting up the access rights, click the Create account button at the bottom of the page to confirm creating a new member.
The new account will show up on the same People list with an edit button, which takes you back to the account details and permissions page, and a bin button for removing accounts that are no longer needed.
When a new member logs in for the first time, it is advised they change the password you assigned at the account creation. Members can change their password at their account overview page.
On the account page, members can also update their contact information, enable two-factor authentication, and select the time zone setting.
Once done, simply click the Save changes button at the bottom of the page to confirm the changes.
UpCloud user accounts also support Gravatar profile pictures when you enter an email address with Gravatar configured to your contact details. If you do not have a profile picture set up yet, it is a simple process of signing up with an existing account or creating a new one. Then follow instructions at Gravatar to set up a profile picture with any or all of your email addresses.