ncloud_create_sub_account
Create a new IAM sub account on Naver Cloud Platform, setting access permissions, password policies, and API/console access, with a dry-run preview option.
Instructions
Create a new sub account (IAM user). Use dryRun=true to preview without creating.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| memo | No | Description (0-300 bytes) | |
| name | Yes | Sub account username (2-30 chars) | |
| tags | No | Tags as a key-value map, max 20 per resource. Example: {"env":"dev","team":"a"} | |
| No | Email address (6-100 chars) | ||
| dryRun | No | If true, returns a preview without actually creating the sub account | |
| loginId | Yes | Login ID (3-60 chars, English letters/numbers/special chars . @ - _, must start with letter) | |
| password | No | Login password (8-16 chars, required if needPasswordGenerate is false) | |
| isMfaMandatory | No | Whether two-factor authentication is required | |
| apiAllowSources | No | Allowed API access sources. Only applied when useApiAllowSource is true | |
| canConsoleAccess | Yes | Whether to enable console access | |
| consolePermitIps | No | Allowed console access IP ranges. Only applied when useConsolePermitIp is true | |
| needPasswordReset | Yes | Whether to notify password change on first login | |
| useApiAllowSource | No | Restrict API access to specific sources. true: only apiAllowSources may call the API, false: any source | |
| useConsolePermitIp | No | Restrict console access to specific IP ranges. true: only consolePermitIps may sign in, false: any IP | |
| canAPIGatewayAccess | Yes | Whether to enable API Gateway access (creates access key) | |
| needPasswordGenerate | No | If true, auto-generate password. If false, must provide password manually. |