---
title: "Using IAM policies with vSphere"
description: "Learn how to connect your vSphere with OVHcloud IAM."
url: https://docs.us.ovhcloud.com/en/account/account-information/use-iam-policies-vsphere
lang: en
---
> For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt.

# Using IAM policies with vSphere

**Learn how to connect your vSphere with OVHcloud IAM.**

This will allow you to:

- Log in to your vSphere using an OVHcloud account.
- Manage your users' rights levels through IAM policies.

 

## Requirements

- You have an [OVHcloud account](https://docs.us.ovhcloud.com/en/account/account-information/create-account.md)
- You know [how to manage account users](https://docs.us.ovhcloud.com/en/account/account-information/manage-local-users.md)
- You know [how to configure policies for IAM](https://docs.us.ovhcloud.com/en/account/account-information/use-iam-policies-console.md)

 

## Instructions

Enabling OVHcloud IAM does not deactivate your existing Hosted Private Cloud users. You can still use them to connect directly to the different elements of your Hosted Private Cloud, without going through IAM.

OVHcloud IAM is not available for environments with advanced security and certification options (PCI-DSS, HIPAA).

 

### Enable IAM on your server

You can enable the IAM option on your Hosted Private Cloud from the OVHcloud API. Execute the following call:

[POST /dedicatedCloud/{serviceName}/iam/enable](https://api.us.ovhcloud.com/console/?section=/dedicatedCloud&branch=v1#post-/dedicatedCloud/-serviceName-/iam/enable)

This operation may take up to 30 minutes.

 

### Create IAM roles

Once the option is activated, IAM roles are created by default and can be used in OVHcloud IAM access policies.

You can create new roles by executing the following call:

[POST /dedicatedCloud/{serviceName}/iam/addRole](https://api.us.ovhcloud.com/console/?section=/dedicatedCloud&branch=v1#post-/dedicatedCloud/-serviceName-/iam/addRole)

The management of vSphere permissions for each IAM role is carried out as for any other Hosted Private Cloud user, via the API or from the [OVHcloud Control Panel](https://docs.us.ovhcloud.com/en/hosted-private-cloud/vmware/introduction-ovhcloud-console.md).

**Note:**

Once this process is finished, two new users/roles will be created in your PCC environment: **iam-admin** and **iam-auditor**. These roles determine what a user can do in vSphere and more roles may be added in the future.\
You can see them in the OVHcloud Control Panel by clicking `Hosted Private Cloud`, then your PCC environment, and then on the `Users` tab.

 

### Using IAM policies

You can create IAM policies from the [OVHcloud IAM menu](https://docs.us.ovhcloud.com/en/account/account-information/use-iam-policies-console.md).

Each IAM role in your Hosted Private Cloud corresponds to an IAM action in the form: "pccVMware:vSphere:assumeRole?**role name**".

**Note:**

This must be typed in manually and is case-sensitive.

For example, for the **iam-admin** role, the action is "pccVMware:vSphere:assumeRole?**iam-admin**".

This action must be specified in the "Actions added manually" section of the policy creation.

 

### Disable IAM on your server

Execute the following call to disable the connection with the OVHcloud IAM:

[POST /dedicatedCloud/{serviceName}/iam/disable](https://api.us.ovhcloud.com/console/?section=/dedicatedCloud&branch=v1#post-/dedicatedCloud/-serviceName-/iam/disable)

 

## Go further

Browse all the [Account information guides](https://docs.us.ovhcloud.com/en/account/account-information/landing-page-account-information.md).

Browse the rest of the [OVHcloud US documentation](https://docs.us.ovhcloud.com/en/index.md) for guides on our other products and services.