Skip to main content
Reading users, groups, policies and the Organization needs a key whose policy grants the IAMReadOnly and OrganizationReadOnly permission sets. The write and delete actions also need IAMManager, or IAMUserManager, IAMGroupManager and IAMApplicationManager for the users, groups, applications and API keys they change. API keys of a locked member stop working.

Create an application for the connection

An API key held by an IAM application keeps working when a member leaves the Organization, so use one for the connection.

1

Create the application

Sign in to the Scaleway console, then open IAM & API keys from the drop-down menu in the top right.

  • Click the Applications tab.
  • Click Create application.
  • Name: StackOne
  • Click Create application.

Give the application read access

The application has no permissions until a policy grants some.

1

Create a policy

In IAM & API keys, open the Policies tab.

  • Click Create policy.
  • Name: StackOne
  • Principal: the application you created
2

Add a rule

Add a rule to the policy for the permission sets the connection needs.

  • Under Organization management, select IAMReadOnly.
  • Select OrganizationReadOnly.
  • Click Next.
  • Follow the console prompts for the scope.
  • Click Confirm rule.
  • Click Create policy.

Generate the API key

Generate a key for the application and keep its secret key.

1

Generate the key

In IAM & API keys, open the API keys tab.

  • Click + Generate API key.
  • API key bearer: the application you created
  • Expiration: a date your key rotation policy allows
  • Click Generate API key.
2

Copy the secret key

Copy the Secret Key across. Scaleway shows it only once.

Find the Organization ID

Use the Organization the API key belongs to.

1

Copy the Organization ID

Open the Organization Settings page in the Scaleway console.

  • Click Copy ID next to the Organization name to copy the Organization ID across.
1

Connect

  • Click Connect.
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup.
2

Use Actions

Connect an AI platform to the linked account’s actions. See AI Platforms.Other ways to call actions are listed in Protocols & SDKs.