Cloud IAM Import
Mirror the access model you already maintain in AWS, GCP or Azure into ZopNight's own users, teams and roles, as reviewable suggestions rather than automatic grants.
4 lessons. 1 quiz.
Read in order, or jump to what you need.
Suggestions, never grants
By the end of this lesson, you will be able to state exactly what IAM import writes and what it never touches, run the review-then-apply flow, and defend why nothing is applied automatically.
The translation staircase
By the end of this lesson, you will be able to describe the three tiers of policy translation, predict which cloud grants land in Needs Attention, and resolve them.
The org-management exclusion
By the end of this lesson, you will be able to name the four policy families that are never auto-imported, explain why AdministratorAccess does not change that, and promote someone deliberately afterwards.
Emails, groups and re-import
By the end of this lesson, you will be able to resolve principals with missing emails, explain why imported teams may arrive empty, and rely on idempotent re-import and clean disconnect.
Module quiz.
Take it once the lessons are done.