By linking to the IIJ ID Service, not only operation managers but a person who has an IIJ ID Service account can manage the DNS platform service. Additionally, people who use an IIJ ID Service account can set reference and editing roles of zone information by contract zone at the granular level.

• Linking to the IIJ ID Service
• Cancelling the Link with the IIJ ID Service
• Assigning a Role to an IIJ ID Service Account
• Cancelling the Role Assigned to an IIJ ID Service Account

Linking to the IIJ ID Service

Use the following procedure to link to the IIJ ID Service.

1. Log in to the control panel as an operations manager who has both permissions shown below. Refer to "Logging In" for more information on how to log in.

   • Management permission of this service
   • Management permission of the service group
2. Open Dashboard.
3. Select a service code (dpfxxxxxxxx) for the IIJ DNS Platform Service.
   
4. Click "Link to IIJ ID Service."
   
5. Click "Link."
   

6. The IIJ ID Login screen appears.
   Enter the account of the IIJ ID Service initial administrator in "ID," and then click the "Next" button.

   [ Note ]

   If you have logged in using an account other than that of the IIJ ID Service initial administrator, you cannot link to the IIJ ID Service.

   Click "" located in the upper right of the control panel to log out once, and then log out of the IIJ ID console (https://www.auth.iij.jp/console/) too. Then, redo the operation from step 1.

   

7. Follow the instructions on the screen to enter the authentication information. The authentication information varies depending on the IIJ ID Service settings. Refer to the "IIJ ID Service Online Manual" for more information.

8. Click "Approve."
   

After linking to the IIJ ID Service, roles can be set with respect to user and group accounts. After linking to the IIJ ID Service, it may take some time before you can set a role. Refer to "Assigning a Role to an IIJ ID Service Account" for more information on role types and how to set them.

Cancelling the Link with the IIJ ID Service

Use the following procedure to cancel the link with the IIJ ID Service.

1. Log in to the control panel as an operations manager who has both permissions shown below. Refer to "Logging In" for more information on how to log in.
   
   • Management permission of this service
   • Management permission of the service group
2. Open Dashboard.
3. Select a service code (dpfxxxxxxxx) for the IIJ DNS Platform Service.
   
4. Click "Link to IIJ ID Service."
   
5. Click "UnLink."
   

6. The IIJ ID Login screen appears.
   Enter the account of the IIJ ID Service initial administrator in "ID," and then click "Next."

   [ Note ]

   If you have logged in using an account other than that of the IIJ ID Service initial administrator, you cannot cancel the link with the IIJ ID Service.

   Click "" located in the upper right of the control panel to log out once, and then log out of the IIJ ID console (https://www.auth.iij.jp/console/) too. Then, redo the operation from step 1.

   

7. Follow the instructions on the screen to enter the authentication information. The authentication information varies depending on the IIJ ID Service settings. Refer to the "IIJ ID Service Online Manual" for more information.
8. Click "Approve."
   

Assigning a Role to an IIJ ID Service Account

After linking to the IIJ ID Service, you need to perform appropriate role management with respect to the operations manager’s IIJ ID Service account.

There is no function for taking over the role of the operations manager. When taking over the role and authority to a new operations manager, assign a role for each management target.

Because the assignment task becomes cumbersome and complicated when there are many management targets, consider creation of a shared IIJ ID account with a goal of staff management or system management using a group account.

Use the following procedure to assign a role to an IIJ ID Service account.

1. Select "Log in with IIJ ID" on the Login screen.

   [ Reference ]

   If you are logged in to the control panel, click "" located in the upper right of the control panel to log out, and then log in with the IIJ ID Service.

   

2. The IIJ ID Login screen appears.
   Enter the account of the IIJ ID Service initial administrator in "ID," and then click "Next."

   [ Note ]

   If you have logged in using an account other than that of the IIJ ID Service initial administrator, you cannot set a role for the first time.

   Click "" located in the upper right of the control panel to log out once, and then log out of the IIJ ID console (https://www.auth.iij.jp/console/) too. Then, redo the operation from step 1.

   

3. Follow the instructions on the screen to enter the authentication information. The authentication information varies depending on the IIJ ID Service settings. Refer to the "IIJ ID Service Online Manual" for more information.
4. Click "" located in the upper right of the control panel.
   

5. Click "Authority Management Screen."
   

6. Click "Add Authority" for the target service code.
   

   Service code for the management target	Description of management	Notes
   dpfxxxxxxxx	Settings and view management for the following menus in "Service Management" on the control panel are targeted. Service List Common Settings TSIG Key Management Service Operation Log Link to IIJ ID Service	Settings for the "Name Server Registration" menu for "Name Server Management" can be operated without the role for dpfxxxxxxxx.
   dpmxxxxxxxx	Settings and view management for the following menus in "Zone Management" on the control panel are targeted. Record Management DNSSEC Management Zone Application History Zone Proxy Management Zone Operation Log	A role with respect to each "Zone Management" menu can be set for each zone. Settings for the "Name Server Registration" menu in "Name Server Management" can be operated without the role for dpmxxxxxxxx.

7. Specify the role information to add, and then click "Confirm."
   

   Item	Description	Notes
   Operations manager/operations manager group	Enter the user account or group account of the IIJ ID Service to which to add a role for the target service code. *Partially-matched users or groups are displayed as prediction candidates under the search column.
   Roles/authorities	Select one from the list and click "." The roles and authorities to be added are displayed on the right-hand side.	Multiple roles and authorities can be added.

   The types of role and authority are as shown below. Also refer to "Examples of role settings by major purpose."

   Role/authority	Description	Notes
   Super Administrator	Initial management role to be assigned to an account with which IIJ ID link has been executed. A person with this role can perform all operations assigned.	If you log in as an operations manager, you will have role contents that are the same as those for this role.
   Super User	This role is not used for DPF.
   Contract Administrator	A person with this role holds authority of both "[Contract] Update Role" and "[Contract] Authority Update Role."
   Contract User	A person with this role holds authority of both "[Configuration] Update Role" and "[Configuration] Authority Update Role."
   Config Operation Administrator	A person with this role can add contacts for related services and options, and cancel contracts.
   Config Operation User	A person with this role can configure settings for services and options.
   Config Operation Reader	A person with this role can reference settings for services and options.
   Invoice Reader	This role is not used for DPF.
   Operation Administrator	This role is not used for DPF.
   Operation User	This role is not used for DPF.
   [Contract] Authority Update Authority	A role that can assign the following authorities on the role setting page [Contract] Update Role [Contract] View Role [Contract] Authority Update Role [Contract] Authority View Role
   [Contract] Authority Reference Authority	A role that can view the following assignment statuses on the role setting page [Contract] Update Role [Contract] View Role [Contract] Authority Update Role [Contract] Authority View Role
   [Contract] Update Authority	A person with this authority can add contacts for related services and options, and cancel contracts.
   [Configuration] Authority Update Authority	A role that can assign the following authorities on the role setting page [Configuration] Update Role [Configuration] View Role [Configuration] Authority Update Role [Configuration] Authority View Role
   [Configuration] Authority Reference Authority	A role that can view the following assignment statuses on the role setting page [Configuration] Update Role [Configuration] View Role [Configuration] Authority Update Role [Configuration] Authority View Role
   [Configuration] Update Authority	A person with this authority can configure settings for services and options.
   [Configuration] Reference Authority	A person with this authority can reference settings for services and options.

8. Click "Register."
   

Examples of role settings by major purpose

Cancelling the Role Assigned to an IIJ ID Service Account

Use the following procedure to cancel the role setting that is assigned to an account linked to the IIJ ID Service.

1. Select "Log in with IIJ ID" on the Login screen.

   [ Reference ]

   If you are logged in to the control panel, click "" located in the upper right of the control panel to log out once.

   

2. The IIJ ID Login screen appears.
   Enter the account of the IIJ ID Service in "ID," and click "Next."

   [ Note ]

   Log in to the zone whose role is to be cancelled, using the IIJ ID Service account to which any of the "[Contract] Authority Update Authority" and "[Configuration] Authority Update Authority" is set.

   

3. Follow the instructions on the screen to enter the authentication information. The authentication information varies depending on the IIJ ID Service settings. Refer to the "IIJ ID Service Online Manual" for more information.
4. Click "" located in the upper right of the control panel.
   
5. Click "Authority Management Screen."
   
6. Click "" for the target service code.
   
7. Click "Delete Roll" for the target role.
   
8. Select a target account to be cancelled from "Operations manager/operations manager group," and click "Confirm."
   *  If there is only one account for the operations manager and operations manager group registered with the target role/authority, the step of selecting a target account to be cancelled is skipped.
   
9. Click "Delete."
   

Role names and authorities before and after March 29, 2023

The old role names (which were used before March 29) and the new roles and authorities corresponding to the old role names are as follows.

Authorities included in role