vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Unified login, API keys, and user and access management
: With our latest updates, you can take advantage of a simplified secure login that is available for all users regardless of your ID type. Whether you have an IBMid or a SoftLayer ID, you can quickly log in to the IBM Cloud console from our enhanced login page. You can also make secure API calls across IBM Cloud and automate your CLI login by using an IAM API key or an IAM access token.

After you log in, you can now see all users, including platform and classic infrastructure users, from your Users page in the Access (IAM) UI. Depending on your access to view other users in the account, you can filter your view quickly by account users, classic infrastructure users, or Cloud Foundry org. You can also use the filters to find users quickly by name, email, or status.

Now that all of your users are in a single console, you can manage their access to all types of resources from the same place. Access starts with the user, so start by selecting a user from your list. Then, depending on which type of resource that you want to assign access to, you can choose from IAM access policies, Cloud Foundry access, or classic infrastructure permissions. If you want to assign IAM access policies, try creating an access group to streamline your access management process by adding all users to the same access group that need the same policies assigned.

For more details, check out [Outstanding User Access Improvements Help Deliver a Unified IBM Cloud Platform](https://www.ibm.com/cloud/blog/announcements/ibm-cloud-access-management).

Find all IBM Cloud CLI plug-in documentation in one place
: You can now access all of the IBM Cloud CLI plug-in documentation in one location, making it easier for you to find any CLI command that you are looking for. Check out the References section in the [CLI documentation](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_cli).

New dashboard and Resource list page
: With our latest update, you can now view all your platform and infrastructure services from one location. When you log in, you can check out the new dashboard.
[Trusted profiles](https://cloud.ibm.com/docs/account?topic=account-identity-overviewtrustedprofiles-bestpract) are supported.





 IBM Cloud platform roles 

Use the following table to identify the platform role that you can grant a user in the IBM Cloud to run any of the following platform actions:



Table 1. IAM user platform roles and actions

 Platform actions Administrator Editor Operator Viewer 

 Grant other account members access to work with the service ![Check mark icon](https://cloud.ibm.com/docs-content/v1/content/f61dbc5d84bf0c89e477a05cab04c72f429e1b7a/log-analysis/images/checkmark-icon.svg) 
 View the ingestion key in the IBM Cloud console ![Check mark icon](https://cloud.ibm.com/docs-content/v1/content/f61dbc5d84bf0c89e477a05cab04c72f429e1b7a/log-analysis/images/checkmark-icon.svg) ![Check mark icon](https://cloud.ibm.com/docs-content/v1/content/f61dbc5d84bf0c89e477a05cab04c72f429e1b7a/log-analysis/images/checkmark-icon.svg) 
 Provision a service instance ![Check mark icon](https://cloud.ibm.com/docs-content/v1/content/f61dbc5d84bf0c89e477a05cab04c72f429e1b7a/log-analysis/images/checkmark-icon.svg) !
For more information, see [Viewing your usage](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-viewingusage).
* How many resource groups, orgs, or spaces can I create?

If you have a Pay-As-You-Go or Subscription account, there's no limit to the number of resource groups, orgs, or spaces that you can create. However, if you have a Lite account, you're limited to one org and one resource group.
* Can I change which notifications I receive?

Yes, you can update your email preferences for receiving notifications from the Email preferences page in the console. Click the Avatar icon ![Avatar icon](https://cloud.ibm.com/icons/i-avatar-icon.svg) > Profile > Email preferences.

For more information, see [Setting email preferences](https://cloud.ibm.com/docs/account?topic=account-email-prefs).
* Can I reset my password?

To reset your account password, click the Avatar icon ![Avatar icon](https://cloud.ibm.com/icons/i-avatar-icon.svg) > Profile in the console. Then, click Edit in the Account user information widget.

To reset your VPN password, complete the following steps:



1. In the IBM Cloud console, go to Manage > Access (IAM), and select Users.
2. Select the user.
3. From the VPN subnets section, click the Edit icon ![Edit icon](https://cloud.ibm.com/icons/icon_write.svg) to enter a new VPN password.
4. Click Apply.



* What can I do if I forget my password?

If you don't remember your password for your IBMid and can't log in to IBM Cloud, you can reset your password by using our [automated system](https://www.ibm.com/account/reg/us-en/reset-password).
* Can I remove my personal data from IBM Cloud?
Log in to IBM Cloud®.

ibmcloud login --sso -a cloud.ibm.com

This command returns a URL and prompts for a passcode. Go to that URL in your browser and log in. If successful, you get a one-time passcode. Copy this passcode and paste it as a response on the prompt. After successful authentication, you are prompted to choose your account. If you have access to multiple accounts, select the account that you want to log in as. Respond to any remaining prompts to finish logging in.
2. Select the current generation of VPC.

ibmcloud is target --gen 2
3. Set the IBMCLOUD_IS_FEATURE_SNAPSHOT environment variable to true.

export IBMCLOUD_IS_FEATURE_SNAPSHOT=true







 Viewing all snapshots of an account in a region from the CLI 

Run the snapshots command to list all snapshots.

ibmcloud is snapshots [--json]

The following example provides a list of all the snapshots in all the resource groups in the eu-de region that were created by the users of the "Test Account".

cloudshell:$ ibmcloud is snapshots [--json]
Listing snapshots in all resource groups and region eu-de under account Test Account as user test.user@ibm.com...
ID Name Status Source volume Bootable Resource group Created
r138-7cac80af-63bb-4a1b-83dd-5f6d550a5db7 bear-peroxide-viewable-oxidant stable r010-df8ffd90-f2e5-470b-83d7-76e64995a1aa false test-snap 2023-02-17T18:49:48+00:00
23 June 2022 

Onboarding software to sell on IBM Cloud by using the API
: To sell your products on IBM Cloud, you can now onboard and publish by using the Partner Center Sell API, in addition to using the Partner Center experience in the console. For more information, see [Partner Center Sell API](https://cloud.ibm.com/apidocs/partner-center-sell).





 22 June 2022 

Identify inactive identities
: You can create a report in the [IBM Cloud console](https://cloud.ibm.com/iam/inactive-identities) to identify which users, service IDs, trusted profiles, and API keys in your account are inactive. Removing access for inactive identities can reduce the risk of unauthorized access to your IBM Cloud® resources and help you manage access more efficiently. For more information, see [Identifying inactive identities](https://cloud.ibm.com/docs/account?topic=account-id-inactive-identities).

Updated process for assigning access
: Assigning IAM, Classic Infrastructure, and IBM Cloud Foundry access just got more streamlined. When assigning access, each service that you select has an in-context description. You can also find all IAM access policy and access group information for an identity under a single tab. Check out the updated process by assigning access to any user, service ID, or trusted profile.

Assign a policy for All IAM Account Management services
: You can now assign an access policy for All IAM Account Management services, which includes the IAM Identity service, IAM Access Management service, IAM User Management service, IAM Access Groups service, and future IAM services. By assigning an access policy for a group of services, you decrease the number of policies in your account and reduce the time and effort to manage access.





 13 June 2022 

Updated process for onboarding services in Partner Center
: Partner Center has made it easier to provide required support information. The process has improved the approval process for publishing your product, and it has added consistency to all third-party product information which helps customers find the help that they need.
(https://cloud.ibm.com/docs/account?topic=account-account_setuptrustedprofiles_strategy) and [Creating trusted profiles](https://cloud.ibm.com/docs/account?topic=account-create-trusted-profile&interface=api).



 Adding users expected response 



* Curl
* Java
* Python
* Go
* Node



{
"members": [
{
"iam_id": "$IBM_ID",
"type": "user",
"created_at": "2019-01-01T01:01:00Z",
"created_by_id": "CREATOR_ID",
"status_code": 200
},
{
"iam_id": "$SERVICE_ID",
"status_code": 400,
"trace": "12345678-abcd-1a2b-a1b2-1234567890ab",
"errors":
{
"code": "error_occurred",
"message": "The service id is missing or incorrect"
}
]
}
]
}

{
"members": [
{
"iam_id": "$IBM_ID",
"type": "user",
"created_at": "2019-01-01T01:01:00Z",
"created_by_id": "CREATOR_ID",
"status_code": 200
},
{
"iam_id": "$SERVICE_ID",
"status_code": 400,
"trace": "12345678-abcd-1a2b-a1b2-1234567890ab",
"errors":
{
"code": "error_occurred",
"message": "The service id is missing or incorrect"
}
]
}
]
}

{
By using this new integration between App ID and IBM Cloud IAM, you can simplify the log in experience for users in your enterprise and automatically add users to your account through their login, instead of having to invite or federate each user individually with IBMid. For more information, see [Enabling authentication from an external identity provider](https://cloud.ibm.com/docs/account?topic=account-idp-integration).





 01 May 2020 

Support for catalog filtering in IBM Cloud enterprises
: You can now use filters to customize which products in the IBM Cloud catalog are available in accounts within an enterprise hierarchy. Filters that are set at a parent account level apply to all child account groups and accounts. For more information, see [Managing products for an IBM Cloud enterprise](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-catalog-enterprise-restrict).







 April 2020 



 21 April 2020 

Unified notifications experience
: Viewing your notifications is now easier than ever with the new unified notifications experience. The notifications page is the centralized place to view and manage all incidents, maintenance, and announcements that might affect your account. In the IBM Cloud console, click the Notifications icon ![Notification icon](https://cloud.ibm.com/docs-content/v1/content/adcecdbe4e86955f88aac7f3c1e7ec3ff44992ef/icons/Notification.svg) on the console menu bar to view your notifications.

Additionally, you can find all infrastructure notifications on the new notifications page. To learn more about the new notifications experience, see [Viewing notifications](https://cloud.ibm.com/docs/get-support?topic=get-support-viewing-notifications).





 18 April 2020 

New features and multi-region support for IBM Cloud Shell (Beta)
: This update to IBM Cloud Shell (Beta) includes several new features to help you work from the command line in IBM Cloud:



* You can now preview web apps within Cloud Shell.
Connecting to Event Streams 

To connect to your Event Streams instance, you need the endpoint URLs for the APIs and the credentials for authentication. Learn how to obtain these details and the connectivity options that you can use.



 Overview 

Services that are provisioned by using the Lite, Standard, Enterprise, or Satellite plans are grouped in the dashboard under the heading Services.

All plans use [IAM](https://cloud.ibm.com/docs/account?topic=account-overview) for authentication. You don't need to understand IAM to get started but some knowledge is recommended if you want to secure your Event Streams service. For more information, see [Managing access to your Event Streams resources](https://cloud.ibm.com/docs/EventStreams?topic=EventStreams-security). To complete the following steps and be authorized to create topics, your application or Service Key must have a Manager access role. By default, the owner of the account that contains the service instance has this role.

By default, Event Streams instances are configured to use the IBM Cloud® public network, so they are accessible over the public internet. If required, you can restrict this access by selecting an alternative networking type or restricting the location that connections are accepted from. For more information, see [Restricting Network Access](https://cloud.ibm.com/docs/EventStreams?topic=EventStreams-restrict_access).





 Connection information 

To access a service instance, create a service key. A service key contains the information that is needed to access the instance, including the endpoint details for its APIs and a unique API key credential.

To create a service key by using the IBM Cloud console:



1. Locate your Event Streams service on the dashboard.
2. Click your service tile.
3. Click Service Credentials.
4. Click New Credential.
5. Complete the details for your new credential. Choose a name and a role and click Add. A new credential appears in the credentials list.
6. Click the new credential by using View Credentials to reveal the details in JSON format.
lithops:
storage_backend: ibm_cos

ibm_cos:
endpoint : <REGION_ENDPOINT>
private_endpoint : <PRIVATE_REGION_ENDPOINT>
api_key : <API_KEY>







 Option 2 (IBM Cloud Object Storage HMAC credentials) for Lithops 



1. From the IBM Cloud Object Storage navigation, click Service Credentials.
2. Click New credential + and provide a name and select a role.
3. Click Advanced options and enable the option Include HMAC Credential.
4. Click Add to generate service credential.
5. Click View credentials and copy the access_key_id and secret_access_key values.
6. Edit your lithops config file and add the following keys:

lithops:
storage_backend: ibm_cos

ibm_cos:
endpoint : <REGION_ENDPOINT>
private_endpoint : <PRIVATE_REGION_ENDPOINT>
access_key : <ACCESS_KEY_ID>
secret_key : <SECRET_KEY_ID>







 Option 3 (IBM IAM API key) for Lithops 



1. If you don't have an IAM API key, navigate to the [IBM IAM dashboard](https://cloud.ibm.com/iam/apikeys).
2. Click Create an IBM Cloud API Key. Enter a name and optional description for your API key and click Create.
3. Copy the generated IAM API key (You can see the key only when you create it, so make sure to copy it).
4. Edit your lithops config file and add the following keys:

lithops:
storage_backend: ibm_cos

ibm:
iam_api_key: <IAM_API_KEY>

ibm_cos:
endpoint : <REGION_ENDPOINT>
private_endpoint : <PRIVATE_REGION_ENDPOINT>









 Deploy your first Code Engine job by using Lithops 

Run the following hello world example,
For more information, see [Trust the security and privacy of IBM Cloud](https://www.ibm.com/cloud/security).
* The IBM Cloud Activity Tracker service captures user-initiated actions that change the state of IBM Cloud services. The information does not provide direct access to databases or applications.
* Only authorized users can view and monitor IBM Cloud Activity Tracker event logs. Each user is identified by their unique ID in the IBM Cloud.
* You can only provision 1 instance of the service per IBM Cloud location (region).







 Getting started 

Complete this tutorial to learn how to provision an IBM Cloud Activity Tracker service in the IBM Cloud. Find out what common data is available in each event and how it can help you monitor your IBM Cloud environment. Learn to navigate in the web UI.





 Prerequisites 



* You need a user ID that is a member, or an owner of, an IBM Cloud account. To get an IBM Cloud user ID, go to: [Create an account](https://cloud.ibm.com/login).
* If you prefer to work with the command line, you must install the IBM Cloud CLI. For more information, see [Installing the IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-install-ibmcloud-cli).
* To complete the steps to manage access to the service, your user ID needs administrator platform permissions to manage the IBM Cloud Activity Tracker service. Contact the account owner. The account owner can grant another user access to the account for the purposes of managing user access, and managing account resources. [Learn more](https://cloud.ibm.com/docs/account?topic=account-userroles).







 Provision an instance of the IBM Cloud Activity Tracker service 

Complete the following steps to provision an instance:



1. Log in to your [IBM Cloud account](https://cloud.ibm.com/login).

After you log in with your user ID and password, the IBM Cloud UI opens.
2. Go to the menu icon !
* UI
* CLI
* API







 Assigning access for enterprise management 

To assign a user access to manage an IBM Cloud® enterprise, you must invite them to the enterprise account, and assign access for the enterprise account management service.

Access to manage the [enterprise](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-what-is-enterprise) requires an access policy within the enterprise account. When you assign a user an Enterprise account management service policy within a child account in an enterprise, the user can't manage the enterprise to which the account belongs. Depending on the assigned role for the Enterprise account management service in the enterprise account, the user can perform specific actions:



* Create new accounts in the enterprise
* Create and name account groups
* Move accounts between account groups
* Import existing accounts to the enterprise
* Update the enterprise name or domain
* View usage reports for the enterprise, a specific account group, accounts within account groups, or a specific account



A policy that gives a user access to the enterprise service can either be assigned on the entire enterprise or only on a specific account group or single account.

Typically, the enterprise account itself doesn't contain many resources. Instead, resources are created in the child accounts of the enterprise. It is within each of these accounts that users can be invited and given access to manage and work with resources. The access and membership that a user has in the enterprise account does not apply to the account groups and child accounts in the enterprise hierarchy. User management and access management remain isolated to each account as you can see depicted in the following diagrams.

The first diagram shows how you can assign a policy to a user in the enterprise account to manage the entire enterprise. The second diagram shows a policy that is scoped to an account group that provides access to manage only that account group and the child accounts that are organized within it.

Zoom

![Enterprise access](https://cloud.ibm.com/docs-content/v1/content/d4595e5202a9a27767cf034e81b038cdf772e0d5/secure-enterprise/images/enterprise-access.svg)
An account owner can adjust the [user list visibility setting](https://cloud.ibm.com/docs/account?topic=account-iam-user-setting) on the Settings page by selecting one of the following options:



* Unrestricted view: All users in your account can view everyone else in the account.
* Restricted view: Limits the ability to view users on the Users page to only those who have been granted explicit access, along with those who have visibility of other users through a classic infrastructure user hierarchy relationship.







 Do I need to assign access to a user when I invite them to the account? 

No. You can invite users, and then assign access later.





 What does it mean for a user to be in pending state? 

A user who is list as Pending is a user who has been invited to IBM Cloud but who hasn't accepted their invitation. On the Users page, the management actions for these users include resending the invitation or cancelling the invitation.

When inspecting access group memberships or access policies in your account, you might see memberships or policies that are related to pending users that were created as part of the invite. These display with an IAM ID that uses the BSS-. This IAM ID is a placeholder for the memberships and policies until the user accepts the invitation. And, since the user hasn't registered with IBM Cloud, they can't retrieve an IAM access token to leverage the assigned access. When the user accepts the invitation and registers with IBM Cloud, the ID in these memberships and policies is replaced with their assigned IAM ID.





 How do I add authentication into my web and mobile apps? 

IAM is used to manage access to your IBM Cloud services and resources. With IBM Cloud App ID, you can take cloud security one step further by adding authentication into your web and mobile apps. With just a few lines of code, you can easily secure your Cloud-native apps and services that run on IBM Cloud. Ready to get started? [Check out the docs](https://cloud.ibm.com/docs/services/appid?topic=appid-getting-startedgetting-started).





 Where do I manage a user's access to infrastructure?
When you use the compute resource token option to log in with a service account projected token, you specify the compute resource token parameter to enter at login.

You can log in with a compute resource token with the CLI in any of the following ways:



* Call the Compute Resource token directly:



1. Specify the --cr-token option with the ibmcloud login command, and provide the content of the compute resource token.
2. Specify the --profile option with the ibmcloud login command, and provide the ID, name, or CRN of the IAM trusted profile that the cluster is linked to.



ibmcloud login --cr-token <token_string> --profile <profile_id_name_or_crn_string>
* Call the Compute Resource token with the token file:



1. Specify the --cr-token option with the ibmcloud login command, and provide the file path of a compute resource token file.
2. Specify the --profile option with the ibmcloud login command, and provide the ID, name, or CRN of the IAM trusted profile that the cluster is linked to.



ibmcloud login --cr-token @token_file_name --profile <profile_id_name_or_crn_string>
* Set the IBMCLOUD_CR_TOKEN environment variable.

Additionally, you can set the environment variable on your system. For example, set IBMCLOUD_CR_TOKEN=token_string, where token_string is the custom value of the compute resource token, or IBMCLOUD_CR_TOKEN=@token_file_name, where @token_file_name is the file path of a compute resource token file that contains the contents of the token. After the environment variable is set, you can simply specify ibmcloud login --profile <profile_id_name_or_crn_string> from the CLI.
* Set both IBMCLOUD_CR_TOKEN and IBMCLOUD_CR_PROFILE environment variables.

Additionally, you can set both environment variables on your system.