Cloud Access Management

---
name: cloud-access-management
description: >
  Manage Elastic Cloud organization access: invite users, assign roles to Serverless
  projects, and create or revoke Cloud API keys. Use when granting, modifying, or
  auditing user access.
compatibility: >
  Requires Python 3.8+, network access to the Elastic Cloud API (api.elastic-cloud.com)
  and optionally to a Serverless Elasticsearch endpoint for custom role operations.
  Environment variables: EC_API_KEY (required, set by cloud-setup), ELASTICSEARCH_URL
  and ELASTICSEARCH_API_KEY (required only for custom roles).
metadata:
  author: elastic
  version: 0.1.0
---

# Cloud Access Management

Manage identity and access for an Elastic Cloud organization and its Serverless projects: invite users, assign
predefined or custom roles, and manage Cloud API keys.

> **Prerequisite:** This skill assumes the **cloud-setup** skill has already run — `EC_API_KEY` is set in the
> environment and the organization context is established. If `EC_API_KEY` is missing, instruct the agent to invoke
> **cloud-setup** first. Do NOT prompt the user for an API key directly.
… install to load the full skill