vania-janet/multiturn-rag-retrieval-data huggingface dataset:
To create an IBM Cloud account, see [Signing up for the IBM Cloud](https://cloud.ibm.com/registration).
2. Review the Identity and Access Management (IAM) information at [Managing Power Systems Virtual Servers (IAM)](https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-managing-resources-and-users).
3. Create a public and private SSH key that you can use to securely connect to your Power Systems Virtual Server. To create a public and private SSH key, see [Adding an SSH key](https://cloud.ibm.com/docs/ssh-keys?topic=ssh-keys-adding-an-ssh-key).
4. (Optional) If you want to use a custom AIX or IBM i image, you must create an IBM Cloud Object Storage (COS) and upload it there. For more information, see [Deploying a custom image within a Power Systems Virtual Server](https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-deploy-custom-image).
5. (Optional) If you want to use a private network to connect to a Power Systems Virtual Server instance, you must either create cloud connections, see [Managing Cloud connections](https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-cloud-connections), or order the [Direct Link Connect](https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-ordering-direct-link-connectsteps-to-order-direct-link-connect) service. You cannot create a private network during the VM provisioning process. You must first use the Power Systems Virtual Server user interface, command line interface (CLI), or application programming interfaced (API) to [create one](https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-configuring-subnet)







 Next steps
How do I get help with issues with creating an account? 

If you are able to log in to an IBM Cloud account, go to the [Support Center](https://cloud.ibm.com/unifiedsupport/supportcenter) and choose one of the following options.



* If you have advanced or premium support, click Chat with IBM to talk to an IBM Cloud support representative.
* Create a support case by clicking Create a case from the Need more help? section.

After you open the case, an email notification is sent to you. Follow the instructions for further communication.



If you can't log in to an IBM Cloud account, [create an account request](https://watson.service-now.com/x_ibmwc_open_case_app.do!/create).





 Why is a VAT ID required when I create an account? 

A tax identification number, such as a VAT ID, GST number, or TIN, is required to create a new personal use account with an address in specific countries or regions. For information about these requirements or where personal use accounts are not permitted, see [Personal use availability](https://cloud.ibm.com/docs/account?topic=account-account-getting-startedsignup-personalaccts). A tax identification number is also required for company accounts depending on your location. Some countries where the local government requires it, taxes are charged directly instead.





 How do I update my credit card? 

If you have a Pay-As-You-Go account type that is billed in US Dollars, complete the following steps:



1. Go to the [Payments](https://cloud.ibm.com/billing/payments) page.
2. Click Update card, enter the new credit card information, and click Save.



To switch to a different payment method, select Pay with Other and then click Submit change request. A support case to change your payment method is created for you.

Based on your account type, you might manage your credit card outside of the console. To manage your credit card outside of the console, complete the following steps:



1.
* Generate an IBM Cloud API key: As an alternative to using the IBM Cloud username and password, you can [use IBM Cloud API keys](https://cloud.ibm.com/docs/account?topic=account-userapikeycreate_user_key). IBM Cloud API keys are dependent on the IBM Cloud account they are generated for. You can't combine your IBM Cloud API key with a different account ID in the same IBM Cloud IAM token. To access clusters that were created with an account other than the one your IBM Cloud API key is based on, you must log in to the account to generate a new API key.
* IBM Cloud username and password: You can follow the steps in this topic to fully automate the creation of your IBM Cloud IAM access token.



Federated ID
: 

* Generate an IBM Cloud API key:[IBM Cloud API keys](https://cloud.ibm.com/docs/account?topic=account-userapikeycreate_user_key) are dependent on the IBM Cloud account they are generated for. You can't combine your IBM Cloud API key with a different account ID in the same IBM Cloud IAM token. To access clusters that were created with an account other than the one your IBM Cloud API key is based on, you must log in to the account to generate a new API key.
* Use a one-time passcode: If you authenticate with IBM Cloud by using a one-time passcode, you can't fully automate the creation of your IBM Cloud IAM token because the retrieval of your one-time passcode requires a manual interaction with your web browser. To fully automate the creation of your IBM Cloud IAM token, you must create an IBM Cloud API key instead.





1. Create your IBM Cloud IAM access token. The body information that is included in your request varies based on the IBM Cloud authentication method that you use.

POST https://iam.cloud.ibm.com/identity/token

Header
: 

* Content-Type: application/x-www-form-urlencoded
Complete the form with your email address, name, region, and phone number. Choose a password.
3. Follow the link provided by the confirmation email, and follow the links to log in to the IBM Cloud® Platform.



Now that you have a platform account, you can create a new Object Storage service instance.





 Creating a service instance 



1. Log in to [the console](https://cloud.ibm.com/).
2. Navigate to the catalog, by clicking Catalog in the navigation bar.

Zoom

![IBM Cloud Catalog](https://cloud.ibm.com/docs-content/v1/content/63322f2f3a72050206eb05ba7f590fdcb741105c/cloud-object-storage/images/catalog.jpg)

Figure 1. Create an IBM Cloud instance
3. Look for the Object Storage tile in the storage section and select it.

Zoom

![github_desktop_setup](https://cloud.ibm.com/docs-content/v1/content/63322f2f3a72050206eb05ba7f590fdcb741105c/cloud-object-storage/images/object-storage-card.jpg)

Figure 2. Select Object Storage
4. Give the service instance a name and choose a plan.
5. Click Create and you're automatically redirected to your new instance.



It is also possible to manage resources using the [IBM Cloud® Platform CLI](https://cloud.ibm.com/docs/account?topic=account-manage_resource):

ibmcloud resource service-instance-create <instance-name> cloud-object-storage <plan> global





 Deleting a service instance 

When a service instance is deleted, the data is not deleted immediately. Instead, it is scheduled for reclamation (by default this is set to take 7 days), after which the data is irreversibly destroyed, and the bucket names will be made available for reuse.
To learn how to create an enterprise and add accounts to an enterprise, see [Getting started with an enterprise](https://cloud.ibm.com/docs/account?topic=account-enterprise-tutorial) and [Best practices for setting up an enterprise](https://cloud.ibm.com/docs/account?topic=account-enterprise-best-practices).
2. Organize account resources in resource groups

Hyper Protect Crypto Services instances are associated with child accounts of the enterprise. Within each account, you can organize service instances in resource groups so that you can assign different access policies to each resource group to enable independent access control. For how to create resource groups and organize resources, see [Best practices for organizing resources](https://cloud.ibm.com/docs/account?topic=account-account_setup).
3. Assign access to manage the enterprise and resources

Based on the Hyper Protect Crypto Services IAM [platform roles](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-manage-accessuko-platform-mgmt-roles) and [service roles](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-manage-accessuko-service-access-roles) that are listed, you can assign users respective access to each tier of the enterprise hierarchy. You can also group users or [service IDs](https://cloud.ibm.com/docs/account?topic=account-serviceids) by defining access groups to streamline the process of assigning access. For more information about assigning access, see [User management for enterprises](https://cloud.ibm.com/docs/account?topic=account-enterprise-access) and [Managing access to resources](https://cloud.ibm.com/docs/account?topic=account-assign-access-resources).
4. Use IBM Cloud API keys

You can create [IBM Cloud API keys](https://cloud.ibm.com/docs/account?topic=account-manapikey) for users or services to track and control API usage.
FAQs about enterprises 

FAQs for your IBM Cloud® enterprise might include questions about importing accounts, moving accounts and account groups, and inviting users to your enterprise. To find all FAQs for IBM Cloud, see our [FAQ library](https://cloud.ibm.com/docs/faqs).



 How do I set up an enterprise account? 

To set up an enterprise, you must be the account owner or an administrator on the Billing account management service. You use the IBM Cloud console to create an enterprise account, enter the name of your company, provide your company's domain, create your enterprise structure, and more. For more information, see [Setting up an enterprise](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-enterprise-tutorial).





 When I create an enterprise, does my IBM Cloud account become the enterprise account? 

No, your IBM Cloud account does not become the enterprise account. Your account is added to the enterprise hierarchy. For more information, see [Enterprise hierarchy](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-what-is-enterpriseenterprise-hierarchy).





 Can I use my IBM Cloud account to create multiple enterprise accounts? 

No, your IBM Cloud account can be a part of only one enterprise account. When you create an enterprise, your account is added to the enterprise hierarchy. See [What is an enterprise?](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-what-is-enterprise) for more information.





 Can an existing enterprise be a child of another enterprise? 

No, an existing IBM Cloud enterprise account can't be imported into another enterprise.





 How do I add child accounts to my enterprise? 

You can use the enterprise dashboard to import an existing account to your enterprise or create a new account within your enterprise.
To create an account group, you need the Administrator or Editor role on the Enterprise service in the enterprise account.



 Creating account groups in the console 



1. From the Enterprise dashboard in the IBM Cloud console, click Accounts to view the accounts and account groups in the enterprise.
2. In the Account groups section, click Create.
3. Enter a name for the account group that reflects the accounts that it will contain. See [How can I use an enterprise?](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-what-is-enterpriseenterprise-use-cases) for examples of how you might organize accounts.
4. If you want an enterprise user other than yourself to be the primary contact for the account group, select their IBMid from the Contact menu. If a user that you want to assign as the contact isn't in the enterprise, first invite the user to the enterprise account. See [Inviting users](https://cloud.ibm.com/docs/account?topic=account-iamuserinv) for more information.

The contact is different from an account owner in that they don't have any additional access within the account group or its accounts. The user that you select as a contact acts as a focal point for any account group issues. For example, if a financial officer notices that the account group's usage costs are unexpectedly high, they might notify the account group contact.
5. If you want the account group to be in a different part of your enterprise hierarchy, select a different parent.

Account groups can't be deleted or moved from where you create them.
6. Click Create.



To create a new tier in your enterprise hierarchy, create new account groups within the account group. You can move accounts that are already in the enterprise into the account group, or you can import or create accounts within it. See [Adding accounts to an enterprise](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-enterprise-add) for more information about importing and creating accounts.





 Creating account groups by using the CLI 

Create an account group by running the following command.
Necessary account credentials for SAP and IBM Cloud 

Use the following steps to obtain account credentials for SAP and IBM Cloud.



  SAP credentials and accounts for new users 



1.  To set up an SAP ID account, follow the instructions on the [SAP Support Portal Home](https://support.sap.com/en/my-support/users.html).







  IBM Cloud credentials and accounts for new users 



1.  Go to [Getting started with IBM Cloud](https://www.ibm.com/cloud/get-started) and click Create a free account.

An email is sent from IBM Cloud Support that contains your verification code, from which you can create your initial login ID and password.
2.  Set up your [profile](https://cloud.ibm.com/docs/account?topic=account-usersettingsprofile-photo) to log in as a new user.



For more information, see [Signing up for IBM Cloud](https://cloud.ibm.com/docs/account?topic=account-account-getting-started).



1.  After you receive your login credentials and have access to your IBM Cloud account, you can create other accounts and users. See [IAM Best practices for assigning access](https://cloud.ibm.com/docs/account?topic=account-account_setup) to learn more about assigning access to IBM Cloud.
IBM Cloud account setup 

An [IBM Cloud account](https://cloud.ibm.com/docs/account?topic=account-overview) is needed to provision and manage IBM Cloud services that make up the reference architectures of the IBM Cloud for Financial Services. Along with the high-level steps to follow, we describe some of the best practices for account setup that will help you satisfy the requirements of the IBM Cloud Framework for Financial Services. In addition, the most relevant [control requirements](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-aboutframework-control-requirements) are provided.



1. Create an IBM Cloud account. For more information, see [Create your account](https://cloud.ibm.com/docs/account?topic=account-account-getting-startedaccount-gs-create).

It is highly recommended that you use a functional ID that is owned by your company rather than an employee's personal ID. A functional ID is a company-owned email address (such as ibm-cloud-admin@domain.com) used to represent a functional user. This allows for uninterrupted administrative access by the account owner as employees leave the company or are reassigned to other projects.

The following table shows the controls that are most related to this step.



Table 1. Related controls in IBM Cloud Framework for Financial Services for account creation

 Family Control 

 Access Control (AC) [AC-2 Account Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2) 



2. Set up the Activity Tracker Event Routing service as described in [Audit logging for IBM Cloud events](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit). This enables IBM Cloud platform events to be recorded for auditing purposes. Setting this up early in the process is important so that all platform events that occur during the rest of these steps are available in the audit logs.

The following table shows the controls that are most related to this step.



Table 2.
To learn how to create an enterprise and add accounts to an enterprise, see [Getting started with an enterprise](https://cloud.ibm.com/docs/account?topic=account-enterprise-tutorial) and [Best practices for setting up an enterprise](https://cloud.ibm.com/docs/account?topic=account-enterprise-best-practices).
2. Organize account resources in resource groups

Hyper Protect Crypto Services instances are associated with child accounts of the enterprise. Within each account, you can organize service instances in resource groups so that you can assign different access policies to each resource group to enable independent access control. For how to create resource groups and organize resources, see [Best practices for organizing resources](https://cloud.ibm.com/docs/account?topic=account-account_setup).
3. Assign access to manage the enterprise and resources

Based on the Hyper Protect Crypto Services IAM [platform roles](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-accessplatform-mgmt-roles) and [service roles](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-accessservice-access-roles) that are listed, you can assign users respective access to each tier of the enterprise hierarchy. You can also group users or [service IDs](https://cloud.ibm.com/docs/account?topic=account-serviceids) by defining access groups to streamline the process of assigning access. For more information about assigning access, see [User management for enterprises](https://cloud.ibm.com/docs/account?topic=account-enterprise-access) and [Managing access to resources](https://cloud.ibm.com/docs/account?topic=account-assign-access-resources).
4. Use IBM Cloud API keys

You can create [IBM Cloud API keys](https://cloud.ibm.com/docs/account?topic=account-manapikey) for users or services to track and control API usage.
For more information, see [Setting up your IBM Cloud account](https://cloud.ibm.com/docs/account?topic=account-account-getting-started) and [Upgrading your account](https://cloud.ibm.com/docs/account?topic=account-upgrading-account).





 Step 2: Create resource group 

Resource groups organize your account resources in customizable groupings so that you can assign users access to multiple resources at a time. Every toolchain is associated with a resource group. By default, the toolchain is created in the Default resource group. For more information, see [Creating a resource group](https://cloud.ibm.com/docs/account?topic=account-rgs&interface=uicreate_rgs).





 Step 3: Store secrets values in a secrets management vault 

Ensure that all of the secret values that you need are stored in a secrets management vault. [Managing IBM Cloud secrets](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-manage-secrets-ibm-cloud) can help you to choose from various secrets management and data protection offerings. If you don't already have an instance of the secrets management vault provider of your choice, create one. For more information, see [Getting started with Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-getting-started).





 Step 4: Complete the optional steps 

Complete any or all of the following optional steps:



1. Create a [code signing key](https://cloud.ibm.com/docs/devsecops?topic=devsecops-devsecops-image-signing) with the proper encoding to sign your infrastructure code.
2. Create an [IBM Cloud API key](https://cloud.ibm.com/iam/apikeys). Save the API key value by either copying, downloading it, or adding it to your vault. Alternatively, you can create the API key during the template-guided setup process.
3.
[Create a service account](https://cloud.google.com/iam/docs/creating-managing-service-accountscreating) in your Google Cloud project.
2. [Create a service account key](https://cloud.google.com/iam/docs/creating-managing-service-account-keyscreating) to establish the identity of the service account. Select JSON for the key type. The private JSON key file will be downloaded directly on your workstation. You need to provide the JSON key file when you use the Unified Key Orchestrator to connect to your Google Cloud KMS keystore.
3. Create a [principal](https://cloud.google.com/iam/docs/overviewconcepts_related_identity) and associate it with the service account, and [assign the required IAM roles to the principal](https://cloud.google.com/iam/docs/granting-changing-revoking-accessgrant-single-role). Unified Key Orchestrator requires the following IAM roles to be able to manage keys in Google Cloud KMS:



* Cloud KMS Admin
* Cloud KMS Crypto Operator











 Connecting to external keystores with the IBM Cloud console 

To connect to an external keystore by using the console, complete the following steps:



1. [Log in to the Hyper Protect Crypto Services instance](https://cloud.ibm.com/login).
2. Click Target keystores from the navigation to view all the available keystores.
3. To connect to an external keystore, click Add keystore.
4. Under Vault, select a vault for the keystore for access control, and click Next.

If you want to assign the keystore to a new vault, click Create vault. For more instructions, see [Creating vaults](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-vaults).
5. Under Keystore type, select one of the following types and click Next:
[API Products](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/31-create-account.png)
2. Complete the required fields and select Create new account at the bottom of the page. Note: Use a different email address than the one that you used to create your developer portal in the previous tutorial. ![API Products](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/32-create-new-account.png)
3. After the developer account is created, log in to view the home page. You must have an app to subscribe to the APIs. Select Apps to go to the registered apps page.
![API Products](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/33-login.png)
4. To register a new application, select Create new App.
![Register new app](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/34-create-new-app.png)
5. Enter a Title and Description for your app and select Submit.
![Submit new app](https://cloud.ibm.com/docs-content/v1/content/78bb71851d95d7580503eb9ba10cf3ae31490ade/apiconnect/tutorials/images/35-submit-new-app.png)
Go to that URL in your browser and log in. If successful, you get a one-time passcode. Copy this passcode and paste it as a response on the prompt. After successful authentication, you are prompted to choose your account. If you have access to multiple accounts, select the account that you want to log in as. Respond to any remaining prompts to finish logging in.
2. Select the current generation of VPC.

ibmcloud is target --gen 2







 Creating a backup policy from the CLI 

Run the ibmcloud is backup-policy-create command to create a backup policy without a backup plan. Use the options --match-tags and --name to give your policy a name and identify the tag that you want to use for your target resources. After the policy is created, you can [add backup plans](https://cloud.ibm.com/docs/vpc?topic=vpc-create-backup-policy-and-planbackup-create-plan-cli) to it later on.

cloudshell:$ ibmcloud is backup-policy-create --match-tags dev:test --name my-backup-policy-v1
Creating backup policy my-backup-policy-v1 under account Test Account as user test.user@ibm.com...

ID r138-8c494618-9e4f-4b67-9a08-ee3491404f3b
Name my-backup-policy-v1
CRN crn:v1:bluemix:public:is:eu-de:a/a10d63fa66daffc9b9b5286ce1533080::backup-policy:r138-8c494618-9e4f-4b67-9a08-ee3491404f3b
Status pending
Plans ID Name Resource type

Backup tags dev:test
Backup resource type volume
Resource group defaults
Created at 2023-02-21T18:37:17+00:00