About Access Management
Eon allows you to control who can access your account and resources, as well as what they can do once they’re in. You’ll manage this access by assigning roles to your users and API credentials. You can also set up action approvals, allowing you to require approval from others before specific high-impact actions run.
The access management articles cover all the different ways your users and custom code can authenticate in your Eon account and how you can manage their access. The explanation articles explain these concepts:
While users, SAML SSO, and API credentials are themselves authentication methods, the actual permissions granted to each are managed through roles. It’s important to understand Eon’s role-based access control model to manage your account’s security.
Before getting into the details of each topic, let’s start with an overview of the different ways your account can be accessed.
Overview of authentication methods
Depending on who or what you need to grant access to, you can choose the appropriate authentication method. This table contrasts the different authentication methods available in Eon and when to use each one:
User management: Basic login vs. SAML SSO
If your account doesn’t have SAML SSO enabled, all users must use basic login. When using basic login, each user must be manually invited to the account and assigned a role. If you need to revoke user access, this must also be done manually.
On the other hand, if you’ve added a SAML SSO configuration, you can retain basic login for global admins. To keep your Eon account secure, all users who aren’t global admins should be managed through your identity provider.
Action approvals
Action approvals add an authorization layer on top of permissions. Users still need the underlying permission to submit an action request, and other users must approve pending action requests before those actions run. They don’t replace roles. They add a separate check for actions covered by approval rules. For more instructions and how to work with action approval requests, see About Action Approvals.