> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage IAM access policies

> Create, edit, and delete IAM access policies through the CoreWeave Cloud Console

This page shows organization administrators how to create, edit, and delete IAM access policies using the [Cloud Console](https://console.coreweave.com/organization/iam/access-policies). Access policies let you control which principals can act on resources in your organization by assigning roles through reusable policy definitions.

## Create an access policy

Create a new access policy when you need to grant a set of roles to one or more principals. To view the **Access Policies** section in the Cloud Console, you need at least the **IAM Viewer** role.

1. In the Cloud Console, navigate to the **Access Policies** page.
2. In the top-right corner, click **Create Policy**.
3. In the policy editor, enter a name for the policy.
4. Enter a description for the policy.
5. Add one or more rules to the policy. For each rule, enter a principal and a role to assign that role to the principal.
6. When you're done, click **Save Policy**.

After you save the policy, it appears in the **Access Policies** list and the rules take effect for the specified principals.

## Edit an access policy

Edit an existing access policy when you need to change its name, description, or the rules that determine which principals receive which roles.

<Note>
  [Default Access Policies](/security/iam/access-policies#default-access-policies) have restricted edit behavior. You can only update which principals appear on a default policy. CoreWeave manages the policies, and they can't be changed.
</Note>

1. In the Cloud Console, navigate to the **Access Policies** page.
2. Search for the policy you want to edit. To view policy details, expand the caret next to the policy name.
3. Click the vertical dot menu (three dots) next to the policy you want to edit, and select **Edit**.
4. Update the policy name and description, or add, edit, or delete rules in the policy:
   * To edit a rule, click the card for the rule you want to edit, adjust the principals and roles, and click outside the card to save your changes to the rule.
   * To add a rule, click the **Add Rule** button at the bottom of the policy editor, and enter the principals and roles for the new rule.
   * To delete a rule, click the card for the rule you want to delete, and click the **Delete** button at the bottom of the card.
5. When you're done, click **Save Policy**.

## Delete an access policy

[Default Access Policies](/security/iam/access-policies#default-access-policies) can't be deleted. You can only delete policies you create yourself.

* In the Cloud Console, on the **Access Policies** page, click the vertical dot menu (three dots) next to the policy you want to delete, and select **Delete**.