In the Administration page, you can manage and edit information, roles, policies, etc. of domain users.

You can create a User and designate a Role that is connected to an API policy.

[IAM] User

In the User page, you can create / delete Cloudforet users or enable / disable them.

You can also grant permissions to users by assigning them roles.

[IAM] Role

Role is a unit that defines the scope of privileges.

[IAM] Policy

Policy refers to the scope of privileges that APS can perform, and is used when you create a Role to assign to a user.