User access management in Illumina environments

In Illumina environments, user access is managed through the AWS Identity and Access Management (IAM) service.

The smallest unit of access control in in Illumina environments is an IAM scope. An IAM role is a specific set of IAM scopes that determine the user’s access level.

Adding a new user

1

Navigate to your Illumina Admin Console > Domain > User management.

2

Send a domain invitation to the new user.

Note: Ensure the user's email address is included in the list of Allowed emails before sending the invitation.

3

Add the user to the appropriate Emedgene Workgroup to grant access.

4

Assign the user an IAM Role.

IAM Roles

v38.0+

There are four predefined IAM roles available in version v38.0 and later:

• Director (+v38)

• Full Access User (+v38)

• Analyst (+v38)

• IT Team (+v38)

Particular scopes that are included in each role can be checked in In Illumina Admin Console > Domain > Role management by clicking on a particular role.

If none of predefined roles meet your needs, you can create a Custom Role by grouping specific scopes. See the Custom Roles Instructions for more details.

<v38.0

On versions 37.0 and older, there is only one predefined IAM role, Has access, which is a prerequisite for accessing the platform. Once the Has access IAM role is assigned to a user, individual IAM scopes must be assigned in the User Management tab in Settings.