---
title: Configure IBM Quantum Platform for an organization
description: Configure IBM Quantum Platform for an organization by configuring IAM, resource groups, and access groups.
source: https://eu-de.quantum.cloud.ibm.com/docs/en/guides/quickstart-steps-org
---

# Configure IBM Quantum Platform for an organization

Follow these steps to set up IBM Quantum Platform.

## 1. Configure IAM settings

First, configure the following settings in the administrator's IAM account. To review and configure these settings, go to [Manage → IAM → Settings](https://cloud.ibm.com/iam/settings).

- **User list visibility** determines whether users can see each other, regardless of project assignment. The `enabled` setting restricts user visibility. That is, users in your account cannot see each other, even if they can access the same resources. Choose the appropriate value for your environment. See [Controlling user visibility](https://cloud.ibm.com/docs/account?topic=account-iam-user-setting) for more information.
- **API key creation** controls whether users can create API keys. In IBM Quantum Platform, it is common to use API keys. If API keys are being used, choose `disabled`. Alternatively, you can give specific permissions to each user.

## 2. (Optional) Create resource groups

Skip this step if you are using access groups that directly reference IBM Quantum service instances.

If you chose to use resource groups, go to [Manage → Account → Resource groups (in Account resources)](https://cloud.ibm.com/account/resource-groups) and click **Create**.

## 3. Create IBM Quantum service instances

If you already created IBM Quantum service instances, skip this step.

- If you are using resource groups, make sure to create the service instances on the appropriate resource group.
- The service instance name, such as `QR-ml`, is needed for access group references.

Follow the steps in [Set up to use IBM Cloud](/docs/guides/cloud-setup#cloud) for instructions.

## 4. Create access groups for projects

First, [create a custom role](/docs/guides/custom-roles#custom) that allows users to perform actions to work with IBM Quantum service instances.
Next, [create an access group](/docs/guides/access-groups) for each project and give that group the minimum set of permissions that are required to work with the project resources.

## 5. Set up your ID provider and assign users

Follow the steps in the appropriate topic, depending on the ID provider you chose to use:

- [Use IBM Cloud® as the ID provider for users that have IBM Cloud accounts](/docs/guides/manage-cloud-users)
- [Use IBM Cloud as the ID provider for users that do not have IBM Cloud accounts](/docs/guides/manage-appid)
- [Use an ID provider other than IBM Cloud for users that do not have IBM Cloud accounts](/docs/guides/manage-appid)
- [Invite users and manage their access](/docs/guides/invite-and-manage-users)

## 6. Configure your firewall

To configure your firewall to enable access to the IBM Quantum API endpoints, add the following URLs to your allowlist:

- IBM Cloud global services:
  ```text
  cloud.ibm.com
  iam.cloud.ibm.com
  api.global-search-tagging.cloud.ibm.com
  globalcatalog.cloud.ibm.com
  resource-controller.cloud.ibm.com
  ```
- IBM Quantum Compute Service - region us-east:
  ```text
  quantum.cloud.ibm.com
  s3.us-east.cloud-object-storage.appdomain.cloud
  ```
- IBM Quantum Compute Service - region eu-de:
  ```text
  eu-de.quantum.cloud.ibm.com
  s3.direct.eu-de.cloud-object-storage.appdomain.cloud
  ```
- IBM Quantum Qiskit Functions preview service:
  ```text
  qiskit-serverless.quantum.ibm.com
  ```

## Next steps

> **Recommendations**
>
> - Learn about the [IBM Cloud account structure](/docs/guides/cloud-account-structure).
> - Read an [overview of the available plans](/docs/guides/plans-overview).