vania-janet/multiturn-rag-retrieval-data huggingface dataset:
You can choose to create a second IBM Cloud account, or you can work with a colleague that has an IBM Cloud account.
* Ensure that you have the correct access permissions for adding and removingnamespaces, see [Access roles for configuring IBM Cloud Container Registry](https://cloud.ibm.com/docs/Registry?topic=Registry-iamaccess_roles_configure).







 Step 1: Authorize a user to configure the registry 

Add a second user to your account and grant them the ability to configure IBM Cloud Container Registry.



1. Add User B to User A's account.



1. Log in to User A's account, by running the following command.

ibmcloud login
2. Invite User B to access User A's account by running the following command, where <user.b@example.com> is User B's email address.

ibmcloud account user-invite <user.b@example.com>
3. Get User A's Account ID by running the following command.

ibmcloud target

Make a note of the Account ID that is in the parentheses ( ) in the Account row.



2. Prove that User B can target User A's account but can't do anything with IBM Cloud Container Registry yet.



1. Log in as User B and target User A's account by running the following command, where <YourAccountID> is User A's Account ID.

ibmcloud login -c <YourAccountID>
2. Try to edit your registry quota to 4 GB of traffic by running the following command.

ibmcloud cr quota-set --traffic=4000

The command fails because User B doesn't have the correct access.



3. Grant User B the Manager role so that User B can configure IBM Cloud Container Registry.



1. Log back in to your account as yourself, User A, by running the following command.

ibmcloud login
2. Create a policy that grants the Manager role to User B by running the following command.
For example:

Authorization: Bearer eyJraWQiOiIyMDE3MDgwOS0wMDowMDowMCIsImFsZyI6IlJTMjU2In0...







 Create a token using the IBM Cloud CLI 

Before you can create a token by using the IBM Cloud CLI, check that you have met the following prerequisites:



1. You have a valid IBMid.
2. You have downloaded and installed the [IBM Cloud CLI](https://cloud.ibm.com/docs/cli?topic=cli-install-ibmcloud-cli).



To create a token using IBM Cloud CLI:



1. Log in to the IBM Cloud CLI:

ibmcloud api https://cloud.ibm.com
ibmcloud login <enter your credentials>

If you have multiple IBM Cloud accounts, you'll be asked to choose an account for the current session. Also, you'll need to choose an organization and space in IBM Cloud.
2. Fetch the IAM access token:

ibmcloud iam oauth-tokens

The output returns the IAM token.

When you use the token, remove Bearer from the value of the token that you pass in API calls.
[MAS-MS-IBMid-Create-Account](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-IBMid-Create-Account.png)

Figure 5. MAS-Dedicated IBMid Create Account
6. Accept IBM Account Privacy notification by clicking Proceed

Zoom

![MAS-MS-IBMid-Privacy](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-IBMid-Privacy.png)

Figure 6. MAS-Dedicated IBMid Privacy Notification
7. Your new IBMid will be created and registration completed:

Zoom

![MAS-MS-IBMid-Ready](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-IBMid-Ready.png)

Figure 7. MAS-Dedicated IBMid Ready

Zoom

![MAS-MS-IBMid-Activated](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-IBMid-Activated.png)

Figure 8. MAS-Dedicated IBMid Activated



After verification/creation of your IBMid has been completed, proceed to the next section [How to Register for MAS Support Services](https://cloud.ibm.com/docs/mas-mshow-to-register-for-mas-support)





 How to Register for MAS Support
If you're experiencing issues with Partner Center, you can create a support case by using the [IBM Cloud Support Center](https://cloud.ibm.com/unifiedsupport/supportcenter).

To create a support case, you must have a Pay-As-You-Go or Subscription account. Also, ensure that you're assigned at least the editor role on the Support Center account management service to create, edit, or view support cases. For more information about actions and roles for account management services, see [Assigning access to account management services](https://cloud.ibm.com/docs/account?topic=account-account-servicesaccount-management-actions-roles) or to assign other users access, see [Assigning user access for working with support cases](https://cloud.ibm.com/docs/get-support?topic=get-support-access).

To create a support case for Partner Center related issues, complete the following steps:



1. Click the Help icon ![Help icon](https://cloud.ibm.com/docs-content/v1/content/ff5860bfede49db3197c4bbba7f7123769bdc068/icons/help.svg) > Support center from the console menu bar.
2. From the Contact support section, click Create a case.
3. Select All products.
4. Select Partner Center - Sell as the topic and click Next.
5. Complete the required fields.

To maintain security, do not include any personal information, sensitive data, or device or service credentials in case responses. For example, don't include passwords, API keys, secrets, or credit card information.
6. The following steps are optional:



* Attach files and resources to provide more details about the issue you're experiencing.
* If you'd like a user in you account to be updated about the case, add them by using the Contact watchlist.
[Create a service account and service account key](https://cloud.google.com/docs/authentication/client-librariescreating_a_service_account) with at least the required [GCP permissions](https://cloud.ibm.com/docs/satellite?topic=satellite-iam-commonpermissions-gcp). As part of creating the service account, a JSON key file is downloaded to your local machine.
2. Open the JSON key file on your local machine, and verify that the format matches the following example. You can provide this JSON key file as your GCP credentials for actions such as creating a Satellite location.

{
"type":"string",
"project_id":"string",
"private_key_id": "string",
"private_key": "string",
"client_email": "string",
"client_id": "string",
"auth_uri": "string",
"token_uri": "string",
"auth_provider_x509_cert_url": "string",
"client_x509_cert_url": "string"
}







 I created a Satellite location, what's next? 

Now that your Satellite location is set up, you are ready to start using IBM Cloud services.



1. Add compute capacity to your location by [attaching more hosts to the location](https://cloud.ibm.com/docs/satellite?topic=satellite-attach-hosts) so that you can run [Satellite-enabled IBM Cloud service](https://cloud.ibm.com/docs/satellite?topic=satellite-managed-services).
2. Create a [Satellite-enabled IBM Cloud service](https://cloud.ibm.com/docs/satellite?topic=satellite-managed-services), such as a [Red Hat OpenShift cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-satellite-clusters).
Log in to the [IBM Cloud catalog](https://cloud.ibm.com/catalog) by using your unique credentials.



1. Create an IBM Cloud [API key](https://cloud.ibm.com/iam/apikeys) in the IAM dashboard before you create an order. Retrieve and verify your credentials before proceeding.
2. In the Compute section, locate the Citrix Digital Workspace Solutions section and select Citrix DaaS.



5. (Optional) If you are using customer managed encryption, either Key Protect or Hyper Protect Crypto Services, set up the required encryption keys before you begin provisioning:



* Encryption service instance
* Key name
* Key ID



For more information on encryption key set up, see the [Key Protect Getting started tutorial](https://cloud.ibm.com/docs/key-protect?topic=key-protect-getting-started-tutorial) or [Getting started with IBM Cloud Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-get-started).



To provision Citrix DaaS for IBM Cloud, you enter the following information.





 Step 1 - Citrix connectivity 



1. Enter your Citrix credentials.



* Citrix customer ID - This ID is your Citrix customer ID. For more information about locating your ID, see this Citrix [Getting started](https://developer.cloud.com/getting-started/docs/overviewcustomer-id) information. If you need to create a new account ID, see [How to Create a New Citrix Account ID/Org ID](https://support.citrix.com/article/CTX106671).
* Citrix API client ID - Enter your Citrix API client ID information. For more information about creating the key pair, see [Create an API client](https://developer.cloud.com/getting-started) from the Citrix Developer site.
* Citrix API client secret - Enter your Citrix API client secret key.



2. Select Validate to validate your credentials.
Depending on the way you authenticate with IBM Cloud, you can choose between the following options to automate the creation of your IBM Cloud IAM token.

You can also use the [API swagger JSON file](https://containers.cloud.ibm.com/global/swagger-global-api/swagger.json) to generate a client that can interact with the API as part of your automation work.

Unfederated ID
: 

* Generate an IBM Cloud API key: As an alternative to using the IBM Cloud username and password, you can [use IBM Cloud API keys](https://cloud.ibm.com/docs/account?topic=account-userapikeycreate_user_key). IBM Cloud API keys are dependent on the IBM Cloud account they are generated for. You can't combine your IBM Cloud API key with a different account ID in the same IBM Cloud IAM token. To access clusters that were created with an account other than the one your IBM Cloud API key is based on, you must log in to the account to generate a new API key.
* IBM Cloud username and password: You can follow the steps in this topic to fully automate the creation of your IBM Cloud IAM access token.



Federated ID
: 

* Generate an IBM Cloud API key:[IBM Cloud API keys](https://cloud.ibm.com/docs/account?topic=account-userapikeycreate_user_key) are dependent on the IBM Cloud account they are generated for. You can't combine your IBM Cloud API key with a different account ID in the same IBM Cloud IAM token. To access clusters that were created with an account other than the one your IBM Cloud API key is based on, you must log in to the account to generate a new API key.
* Use a one-time passcode: If you authenticate with IBM Cloud by using a one-time passcode, you can't fully automate the creation of your IBM Cloud IAM token because the retrieval of your one-time passcode requires a manual interaction with your web browser. To fully automate the creation of your IBM Cloud IAM token, you must create an IBM Cloud API key instead.





1.
Use feature and subscription codes to create new accounts
: When you [register for a new IBM Cloud account](https://cloud.ibm.com/registration), you can use a feature code that you received from participating in a special event or a subscription code that you received by email. Instead of verifying your identity by entering your credit card information, click the option to Register with a code to complete the set up of your new account.







 February 2022 



 28 February 2022 

365 days of status history is now available
: You can now easily view events that were completed in the past year on the IBM Cloud Status page. Previously, you could view only the history of completed events from the past month. For more information about the IBM Cloud Status page, see [Viewing cloud status](https://cloud.ibm.com/docs/get-support?topic=get-support-viewing-cloud-status).





 7 February 2022 

Support for onboarding third-party services in Partner Center
: Onboarding new services in the resource management console is no longer supported. You must use Partner Center to onboard new services to the IBM Cloud console. You can continue to manage existing services in the resource management console.







 December 2021 



 17 December 2021 

Restricting domains for account invitations
: You can now restrict membership to your account based on the domain of the users by creating an allowlist. This way, only users with a specific domain or domains can be invited to the account. For more information, see [Restricting domains for account invitations](https://cloud.ibm.com/docs/account?topic=account-restrict-acct-invite).







 November 2021 



 8 November 2021 

Data centers closed in 2021
: The following list shows the locations with the associated data centers and specific PODs that were closed by 08 November 2021.



* Dallas: DAL05 – POD2
* Houston: HOU02
* Melbourne: MEL01
* Oslo: OSL01
* Washington DC: WDC01 – POD3 and POD4
To access clusters that were created with an account other than the one your IBM Cloud API key is based on, you must log in to the account to generate a new API key.
* Use a one-time passcode: If you authenticate with IBM Cloud by using a one-time passcode, you can't fully automate the creation of your IBM Cloud IAM token because the retrieval of your one-time passcode requires a manual interaction with your web browser. To fully automate the creation of your IBM Cloud IAM token, you must create an IBM Cloud API key instead.





1. Create your IBM Cloud IAM access token. The body information that is included in your request varies based on the IBM Cloud authentication method that you use.

POST https://iam.cloud.ibm.com/identity/token

Header
: 

* Content-Type: application/x-www-form-urlencoded
* Authorization: Basic Yng6Yng=Yng6Yng= equals the URL-encoded authorization for the username bx and the password bx.



Body for IBM Cloud username and password
: 

* grant_type: password
* response_type: cloud_iam uaa
* username: Your IBM Cloud username.
* password: Your IBM Cloud password.
* uaa_client_id: cf
* uaa_client_secret: Add the uaa_client_secret key with no value specified.



Body for IBM Cloud API keys
: 

* grant_type: urn:ibm:params:oauth:grant-type:apikey
* response_type: cloud_iam uaa
* apikey: Your IBM Cloud API key
* uaa_client_id: cf
* uaa_client_secret: Add the uaa_client_secret key with no value specified.



Body for IBM Cloud one-time passcode
: 

* grant_type: urn:ibm:params:oauth:grant-type:passcode
* response_type: cloud_iam uaa
* passcode: Your IBM Cloud one-time passcode.
For more information, see [Setting up your IBM Cloud account](https://cloud.ibm.com/docs/account?topic=account-account-getting-started) and [Upgrading your account](https://cloud.ibm.com/docs/account?topic=account-upgrading-account).





 Step 2: Store secrets values in a secrets management vault 

Ensure that all of the secret values that you need are stored in a secrets management vault. [Managing IBM Cloud secrets](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-manage-secrets-ibm-cloud) can help you to choose from various secrets management and data protection offerings. If you don't already have an instance of the secrets management vault provider of your choice, create one. For information about IBM Cloud® Secrets Manager, see [Getting started with Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-getting-started).





 Step 3: Create a Kubernetes cluster 

Create a [Kubernetes cluster](https://cloud.ibm.com/kubernetes/catalog/cluster/create). While you are evaluating the service, you can use the Free pricing plan. The cluster might take some time to provision. As the cluster is created, it progresses through these stages: Deploying, Pending, and Ready. [Learn more.](https://cloud.ibm.com/docs/containers?topic=containers-clusters).





 Step 4: Create a Container Registry namespace 

Create an [IBM Cloud® Container Registry namespace](https://cloud.ibm.com/registry/namespaces). IBM Cloud Container Registry provides a multi-tenant private image registry that you can use to store and share your container images with users in your IBM Cloud account. Select the location for your namespace, and click Create. [Learn more.](https://cloud.ibm.com/docs/Registry?topic=Registry-getting-started)





 Step 5: Complete optional steps 

Complete any or all of the following optional steps.
[Navigation Menu icon](https://cloud.ibm.com/docs-content/v1/content/4d8c6eec891cff72b666dc24bd3211810c77fb42/icons/icon_hamburger.svg) > Resource list and clicking the name of the service that you're targeting. In the Details section, copy the CRN.



2. In the IBM Cloud console, click Manage > Access (IAM), and select Trusted profiles.
3. Click Create profile.
4. Define your profile by providing a name and a description, and click Continue.

In the description, provide a list of actions that are available for the trusted profile.
5. You can create the trusted profile before adding details by selecting Decide later. Or, establish trust by completing the following steps:



1. Select IBM Cloud® services.
2. Enter the CRN that service administrator provided to you.



6. Click Continue.
7. (Optional) [Assign access to the trusted profile](https://cloud.ibm.com/docs/account?topic=account-create-trusted-profiletp-access).
8. Or, click Create without assigning any access.



IBM Cloud services are static identities that don't use conditions to establish trust. Instead, you establish trust by using the CRN to create a direct link with the trusted entity.





 Establishing trust with service IDs in the console 

You can use trusted profiles to give a service ID cross-account access and access to call classic infrastructure services. Complete the following steps to define how a service ID can access specific resources in your account:



1. Ask an administrator in the other account for the service ID value that identifies the service ID.

An administrator can find the service ID value by going to Manage > Access (IAM) > Service IDs, and selecting the service ID that you want to target. Click Details and copy the ID that begins with ServiceId.
2. In the IBM Cloud console, click Manage > Access (IAM), and select Trusted profiles.
3. Click Create profile.
Setting up an enterprise 

This tutorial walks you through how to set up an enterprise by department so you can manage and track usage costs for multiple IBM Cloud® accounts. By completing this tutorial, you learn how to create an enterprise, add accounts and organize them in account groups, invite users, and explore subscriptions.

The tutorial uses a fictitious company that is called Example Corp that wants to create an enterprise with the following structure. As you complete the tutorial, adapt each step to match your organization's accounts and desired structure.

Zoom

![A four-tier enterprise that groups accounts according to department in an organization. For example, account groups are named Marketing, Development, and Sales. The account groups contain accounts for teams within those departments. For example, the Sales account group contains accounts for Direct, Online, and Enablement.](https://cloud.ibm.com/docs-content/v1/content/d4595e5202a9a27767cf034e81b038cdf772e0d5/secure-enterprise/images/enterprise-by-dept.svg)

Figure 1. An enterprise that is organized by department



 Before you begin 

Read [What is an enterprise?](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-what-is-enterprise) to learn the basic principles of how account management, billing, resources, and user and access management work in an enterprise.

Verify that you have the required access in a Subscription account, which serves as the base account from which you create the enterprise. To create an enterprise, you must be the account owner or have the Administrator role on the Billing account management service.

Creating an enterprise from an account and importing existing accounts cannot be undone. This tutorial is provided as an example of the steps you can follow to set up an enterprise by department, but you should carefully plan your enterprise structure around your organization's needs.





 Step 1: Create the enterprise 

Enterprises are created from an existing Subscription account. When you create the enterprise, the account is added to the enterprise hierarchy.
For more information about issues with credit card authorization, see [Credit Card error messages](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-cc-error-messages).
* How do I get help with issues with creating an account?

If you are able to log in to an IBM Cloud account, go to the [Support Center](https://cloud.ibm.com/unifiedsupport/supportcenter) and choose one of the following options.



* If you have advanced or premium support, click Chat with IBM to talk to an IBM Cloud support representative.
* Create a support case by clicking Create a case from the Need more help? section.

After you open the case, an email notification is sent to you. Follow the instructions for further communication.



If you can't log in to an IBM Cloud account, [create an account request](https://watson.service-now.com/x_ibmwc_open_case_app.do!/create).
* Why is a VAT ID required when I create an account?

A tax identification number, such as a VAT ID, GST number, or TIN, is required to create a new personal use account with an address in specific countries or regions. For information about these requirements or where personal use accounts are not permitted, see [Personal use availability](https://cloud.ibm.com/docs/account?topic=account-account-getting-startedsignup-personalaccts). A tax identification number is also required for company accounts depending on your location. Some countries where the local government requires it, taxes are charged directly instead.
* How do I update my credit card?

If you have a Pay-As-You-Go account type that is billed in US Dollars, complete the following steps:



1. Go to the [Payments](https://cloud.ibm.com/billing/payments) page.
2. Click Update card, enter the new credit card information, and click Save.



To switch to a different payment method, select Pay with Other and then click Submit change request. A support case to change your payment method is created for you.
(https://cloud.ibm.com/docs/account?topic=account-account_setupresource-group-strategy).

For more information about resource groups, see [Managing resource groups](https://cloud.ibm.com/docs/account?topic=account-rgs).



 Creating Resource Groups 

To create new Resource Groups requires few steps:



1. Log in to the [IBM Cloud console](https://cloud.ibm.com) with your unique credentials.
2. Click Manage > Account > Account Resources > Resource Groups.
3. Click Create, enter a unique Name for the new Resource Group, and click Create.









 Define the Cloud Identity and Access Management (IAM) 

Optional setup of IAM controls.

Significant granularity of access control is available for all IBM Cloud services for specified Resource Groups through IAM Access policies.

For more information about IAM roles and actions, see [IAM access](https://cloud.ibm.com/docs/account?topic=account-userroles) with full details on how IAM policies are structured.

An account owner or administrator is assumed to have performed IAM setup for the account before the creation of an SAP landscape, including assignment of all authorizations required to provision infrastructure.

If any actions described in this documentation are being performed by another user who is not the account owner/creator, then you need to check the current IAM authorizations to complete the tasks for deploying and running SAP within IBM Cloud.



 Checking current IAM authorizations 

Managing your IBM Cloud environment and preparing it to run SAP workloads includes provisioning compute, storage and network, securing the server, downloading and installing your SAP software and applications, and testing connectivity to your environment by using resources from IBM Cloud® for SAP.

Confirm with an administrator that you are assigned the permissions that are required to check current all authorizations. For more information about the required roles and permissions, see [Access management in IBM Cloud](https://cloud.ibm.com/docs/account?topic=account-cloudaccess).

The following example for VPC Infrastructure, shows how to check the current authorizations:



1.