cloud-access-management

Manage Elastic Cloud organization and Serverless project access via API keys.

546|44|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/elastic/agent-skills --skill cloud-access-management
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cloud-access-management
Source: https://github.com/elastic/agent-skills/tree/main/skills/cloud/access-management
Command: npx skills add https://github.com/elastic/agent-skills --skill cloud-access-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the management of user access within Elastic Cloud organizations and Serverless projects, ensuring the right people have the right permissions efficiently.

Core Features & Use Cases

  • User Invitation & Role Assignment: Invite new users and assign predefined or custom roles at the organization or project level.
  • API Key Management: Create, list, and revoke Cloud API keys for programmatic access with scoped permissions.
  • Custom Role Creation: Define granular access controls for Serverless projects when predefined roles are insufficient.
  • Use Case: Grant a new team member "Developer" access to the "search" Serverless project by inviting them to the organization and assigning the appropriate role.

Quick Start

Invite [email protected] to your organization with viewer access to the search project.

Frequently Asked Questions about cloud-access-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I invite users and assign roles in Elastic Cloud?

You can invite users to your Elastic Cloud organization and assign predefined or custom roles at the organization or Serverless project level to manage their access permissions.

Can I create custom roles for Elastic Serverless projects?

Yes, you can define granular custom roles for Serverless projects when predefined roles are insufficient, optionally using Elasticsearch credentials to perform custom role operations.

How do I manage Cloud API keys for CI/CD pipelines?

You can create, list, and revoke Elastic Cloud API keys with scoped permissions to provision programmatic credentials for CI/CD pipelines and other automated workflows.

What credentials do I need to automate Elastic Cloud access management?

Automating Elastic Cloud access management requires setting the EC_API_KEY environment variable for authentication, and optionally Elasticsearch credentials for custom role operations.

What's the best way to revoke user access from an Elastic Cloud organization?

Revoking Elastic Cloud access involves removing users from the organization or Serverless project, which can be handled programmatically to ensure permissions are efficiently rescinded.

Does this approach support onboarding new team members to Serverless projects?

Yes, onboarding new team members to Serverless projects is supported by inviting them to the Elastic Cloud organization and assigning the appropriate role for the specific project.