How to create an IAM user with access to only one Dedicated Server?

Customer area and account settings
1

Hello,

I am trying to create an IAM user for a third-party company that manages one of our Dedicated Servers.

My goal is simple:

  • The user should be able to fully manage a single Dedicated Server (Bare Metal Cloud)

  • The user should be able to reboot, reinstall, access KVM/IPMI and perform all server management tasks

  • The user should NOT have access to billing, invoices, payment methods, tickets, account settings, users or any other services

What I have tried:

  • Created a local user

  • Created a group with role "None"

  • Created a policy for the Dedicated Server

  • Assigned the policy to the group

  • Assigned the user to the group

The user cannot log in because Control Panel permissions are missing.

According to the OVH IAM documentation, I should create a policy using the resource type "OVHcloud customer account" and grant the required Control Panel permissions.

However, when I try to do this, I receive errors such as:

  • "Cannot add an account to a resource group"

  • "The submitted data is invalid"

If I use the predefined "Restricted Administrator" role, the user can log in, but can still see much more account information than expected.

Has anyone successfully configured a user who can fully manage only one Dedicated Server and nothing else?

Thank you.