Decide what every person and program can do.
IAM decides what each person and program in your organization can do, with policy documents attached to users, groups and bots. There are no roles to untangle.
What you get
Policies, not roles
Allow and deny statements over actions and resource names, attached directly or through groups.
Bots and API keys
Programs get their own identity. API keys act with their owner’s access, nothing more.
Keyless CI
Exchange a GitHub Actions OIDC token for a short-lived key with ezgamehost/setup-ezgh. No stored secrets.
Directory sign-in and SCIM
Sign in to the console through your identity provider and provision people with SCIM.
Pricing
All pricing| Users, groups, bots and policies | No charge |
At a glance
- Identities
- Users, groups and bots
- Policies
- Up to 20 statements each
- Projects
- 10 per organization by default
Built on the platform
Governed like every other product, from the first call.
More in security and identity
Secrets
Versioned credentials and configuration
EZGH Secrets stores sensitive values, such as database passwords, API keys, certificates and the contents of a .env file, as named fields in immutable versions.
EZGH SSO
A directory and sign-in for your people
EZGH SSO gives your organization a directory of its people and an identity provider for your own apps and EZGH apps. People sign in once at your portal and reach everything you assign them.