> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tenbyte.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Tenbyte Access Delegations

Access Delegation in Tenbyte Cloud allows controlled sharing of cloud resources with other users or systems.

You can grant limited access to a specific billing account or provide full access across all associated resources, while maintaining clear permission boundaries.

## Select Access Delegation from Dashboard

* Open your Tenbyte Cloud dashboard and click on **Access Delegation** to manage your **Access**.

  <Frame caption="Select Access Delegation">
    <img src="https://mintcdn.com/vidinfra/SRZLRzCP1yNF_tQm/images/cloud/62.png?fit=max&auto=format&n=SRZLRzCP1yNF_tQm&q=85&s=278221f0b7a144b34e26f9435d841d48" alt="Select Access Delegation" width="1918" height="876" data-path="images/cloud/62.png" />
  </Frame>

* In the Access section of the Tenbyte Cloud dashboard, you can choose between two types of access:

  1. **Access Delegation**
  2. **API Token**

  <Frame caption="Choose Type">
    <img src="https://mintcdn.com/vidinfra/SRZLRzCP1yNF_tQm/images/cloud/63.png?fit=max&auto=format&n=SRZLRzCP1yNF_tQm&q=85&s=efef009e76bf66a510de22dfb1baa871" alt="Choose Type" width="1918" height="877" data-path="images/cloud/63.png" />
  </Frame>

***

## Access Delegation

Allows you to delegate access to a user or system, enabling them to manage resources under your account.

### For Restricted Scope

Restricted Scope means the user will have access only to the resources tied to the selected billing account.

* Click on **New** to create a **new access delegation**.
* Under **Scope**, select **Restricted**.
* Choose the **Billing Account** you wish to share access to.
* Enter the **email address** of the user you want to delegate access to.
* Provide an **Access Name**.
* Click **Create** to send the access invitation to the specified email.

  <Frame caption="Access Delegation for Restricted Scope">
    <img src="https://mintcdn.com/vidinfra/SRZLRzCP1yNF_tQm/images/cloud/65.png?fit=max&auto=format&n=SRZLRzCP1yNF_tQm&q=85&s=4002b240752a12427bfa09be938fa864" alt="Access Delegation for Restricted Scope" width="1918" height="873" data-path="images/cloud/65.png" />
  </Frame>

### For Global Scope

**Global Scope** means the user will have access to all resources under the billing account.

* Follow the same steps as above to create a new access delegation.
* Under **Scope**, select **Global**.
* Choose the **Billing Account** you wish to share access to.
* Enter the **email address** of the user for access delegation.
* Provide an **Access Name**.
* Click **Create** to send the access invitation.

  <Frame caption="Access Delegation for Global Scope">
    <img src="https://mintcdn.com/vidinfra/SRZLRzCP1yNF_tQm/images/cloud/66.png?fit=max&auto=format&n=SRZLRzCP1yNF_tQm&q=85&s=b5770a532437197d944164a722c7dde7" alt="Access Delegation for Global Scope" width="1918" height="877" data-path="images/cloud/66.png" />
  </Frame>

<Warning>
  Be cautious when selecting Global, as it grants access to all resources within the billing account.
</Warning>

<Note>
  The user will receive an invitation to accept access to the specified billing account.
</Note>

***

## Access for API Token

API Token is used to generate a key for interacting with Tenbyte Cloud’s API.

* Navigate to the **Access** section again and click on **New**.
* Select **API Token** under Type.
* Provide an **Access Name** for your API token.
* Click **Create** to generate the API token.

  <Frame caption="Access for API Token">
    <img src="https://mintcdn.com/vidinfra/SRZLRzCP1yNF_tQm/images/cloud/68.png?fit=max&auto=format&n=SRZLRzCP1yNF_tQm&q=85&s=51a8f4bdf5744b567dfe7c4f5b92baf1" alt="Access for API Token" width="1918" height="877" data-path="images/cloud/68.png" />
  </Frame>

<Note>
  For API Token, the scope type works similarly to Access Delegations, allowing you to specify restricted or global access.
</Note>

***

## Created Access Delegations

* Once the **Access Delegation** is created, you will see the **delegated access listed** under the Access section.
* The status of the delegated access will be shown as **Pending** until the user accepts the access invitation.
* Once accepted, the user will be able to perform actions as per the scope of access.

  <Frame caption="Created Access Delegations Lists">
    <img src="https://mintcdn.com/vidinfra/SRZLRzCP1yNF_tQm/images/cloud/63.png?fit=max&auto=format&n=SRZLRzCP1yNF_tQm&q=85&s=efef009e76bf66a510de22dfb1baa871" alt="Created Access Delegations" width="1918" height="877" data-path="images/cloud/63.png" />
  </Frame>
* You can view or remove delegations anytime from the Access section.
