Information for: DEVELOPERS   PARTNERS

Controlling access to Acquia Cloud

Acquia Cloud provides a comprehensive set of security features that you can use to control who can access your Acquia applications and how. These features include:

  • Teams, roles, and permissions – This feature allows you to assign roles to your team members, with fine-grained permissions that govern what they are allowed to access and do, and allows you to assign members to teams, where each team can have one or more applications in your organization that they can work on.
  • Two-step verification – By default, all users need to sign in with a user name (email address) and password to sign in to the Acquia Cloud interface and access an Acquia application. You can also enable two-step verification, which requires users in addition to use a trusted device or enter a verification code that they receive by mobile application or text message.
  • Session timeouts – When you are signed in to the Acquia Cloud interface, your session expires after 90 minutes of inactivity, and you will be required to sign in again with your user name and password before you take any actions that require being signed in. SSH client sessions expire after 15 minutes. These timeouts help to secure your Acquia Cloud applications.
  • Password strength requirements – You can optionally require that any users that sign in to the Acquia Cloud interface must have a password that meets a password strength requirement, to ensure that their passwords are not easy to guess.
  • IP address whitelisting – You can configure Acquia Cloud to allow Acquia Cloud interface-based access to your applications for only specified IP addresses from a whitelist.

Each of these features controls access to the Acquia Cloud interface and not access to your Acquia Cloud websites or other applications.

Handling user-based tasks

Administrators are responsible for managing all aspects of their users, from access to permissions. The following documentation pages include information that describes these basic organizational tasks: