Manage Users

Managing users in Commerce Cloud involves adding SSH keys, creating user accounts, and assigning appropriate roles and permissions.

Via Web UI

Navigate to: Account settings → Account Settings → SSH Keys

1. Click on your user icon (top-right)
2. Select "Account settings"
3. Go to "SSH Keys" section
4. Click "Add public key"
5. Paste your SSH public key
6. Give it a descriptive name
7. Save

Via CLI

You can also add SSH keys using the magento-cloud CLI:

magento-cloud ssh-key:add

This command will prompt you to select or specify your SSH key file.

ssh <environment-id>@ssh.<region>.magento.cloud

If you don't have an SSH key yet, generate one:

# Generate new SSH key
ssh-keygen -t rsa -b 4096 -C "your_email@example.com"

# View your public key
cat ~/.ssh/id_rsa.pub

Via Web UI

1. Click the gear icon next to your project
2. Select Users
3. Click Add User
4. Enter user's email address
5. Select role and permissions
6. Save

The user will receive a welcome email from Magento with instructions on how to get started.

Via CLI

You can also use the magento-cloud CLI to add users:

magento-cloud user:add

You can allow users access at two levels:

1. Project Level: Access to the overall project
2. Environment Level: Access to specific environments within the project

Each user can be designated as a "Super User/Admin":

• Allows them to do anything in any environment
• Overrides environment-specific restrictions
• Full project access without limitations

If Super User is NOT enabled:

• You can designate access per environment
• User only has access to specified environments
• More granular control over permissions

1. Admin

• Can do just about anything
• Only role that can access SSH by default
• Full environment control
• Can manage settings, deploy, merge, branch
• Can add/remove users

2. Contributor

• Can merge code to an environment
• Can branch from an environment
• Can push code and trigger deployments
• Cannot SSH by default

Enable SSH for Contributors

You can allow contributors to SSH into an environment by adding this to .magento.app.yaml:

access:
    ssh: contributor

3. Reader

• View-only access
• Can view environments and logs
• Cannot make changes
• Cannot push code, merge, or branch
• Cannot SSH

"Like reading books from the library but more boring (as Magento Cloud is not a historical novel)."

When you change user permissions, you must redeploy the environment for changes to take effect.

Trigger Redeployment

If no code changes are needed, use an empty commit:

git commit --allow-empty -m "Redeploy for permission changes"
git push

Providing access to support tickets is a completely different mechanism than providing access to configure environments.

Where to Manage Support Access

Support ticket access is managed on the magento.com portal, not in the Cloud Admin UI.

Default Permissions

• By default, only the account owner can create support tickets
• Account owner is shown in: Top ribbon → Settings gear icon → Users → Account owner

Share Support Access

The account owner can share "Submit a Ticket" access via their Magento portal:

1. Log into magento.com
2. Go to account/support settings
3. Add users who should be able to submit tickets
4. Specify permission level

Security Best Practices

• Least Privilege: Grant only necessary permissions
• Reader Role: Use for auditors, stakeholders, or anyone who only needs to view
• Contributor Role: For developers who push code but don't need SSH
• Admin Role: Only for senior developers or DevOps who need full control
• SSH Keys: Regularly audit and remove unused keys

Environment-Specific Access

• Restrict production access to essential personnel only
• Allow broader access to integration/development environments
• Use Super User designation sparingly

Onboarding Workflow

1. Add user to project with appropriate role
2. User receives welcome email with instructions
3. User adds SSH key to their account
4. Configure environment-specific permissions if needed
5. Redeploy environments after permission changes
6. Test access and SSH connectivity

SSH Key Management

# Add SSH key
magento-cloud ssh-key:add

# List SSH keys
magento-cloud ssh-key:list

# Delete SSH key
magento-cloud ssh-key:delete <id>

User Management

# Add user to project
magento-cloud user:add

# List users
magento-cloud user:list

# Update user role
magento-cloud user:update

# Delete user
magento-cloud user:delete <email>

• Create and manage users
• SSH Access Configuration
• Project Management