cloud-access-management

SKILL.md

Cloud Access Management

Manage identity and access for an Elastic Cloud organization and its Serverless projects: invite users, assign
predefined or custom roles, and manage Cloud API keys.

Prerequisite: This skill assumes the cloud-setup skill has already run — EC_API_KEY is set in the
environment and the organization context is established. If EC_API_KEY is missing, instruct the agent to invoke
cloud-setup first. Do NOT prompt the user for an API key directly.

For project creation, see the cloud-create-project skill. For day-2 project operations (list, update, delete), see
cloud-manage-project. For Elasticsearch-level role management (native users, role mappings, DLS/FLS), see the
elasticsearch-authz skill.

For detailed API endpoints and request schemas, see references/api-reference.md.

Jobs to Be Done