Configure IBM Quantum Platform for an organization

Follow these steps to set up IBM Quantum Platform.

1. Configure IAM settings

First, configure the following settings in the administrator's IAM account. To review and configure these settings, go to Manage → IAM → Settings.

• User list visibility determines whether users can see each other, regardless of project assignment. The enabled setting restricts user visibility. That is, users in your account cannot see each other, even if they can access the same resources. Choose the appropriate value for your environment. See Controlling user visibility for more information.
• API key creation controls whether users can create API keys. In IBM Quantum Platform, it is common to use API keys. If API keys are being used, choose disabled. Alternatively, you can give specific permissions to each user.

2. (Optional) Create resource groups

Skip this step if you are using access groups that directly reference IBM Quantum service instances.

If you chose to use resource groups, go to Manage → Account → Resource groups (in Account resources) and click Create.

3. Create IBM Quantum service instances

If you already created IBM Quantum service instances, skip this step.

• If you are using resource groups, make sure to create the service instances on the appropriate resource group.
• The service instance name, such as QR-ml, is needed for access group references.

Follow the steps in Set up to use IBM Cloud for instructions.

4. Create access groups for projects

First, create a custom role that allows users to perform actions to work with IBM Quantum service instances. Next, create an access group for each project and give that group the minimum set of permissions that are required to work with the project resources.

5. Set up your ID provider and assign users

Follow the steps in the appropriate topic, depending on the ID provider you chose to use:

• Use IBM Cloud® as the ID provider for users that have IBM Cloud accounts
• Use IBM Cloud as the ID provider for users that do not have IBM Cloud accounts
• Use an ID provider other than IBM Cloud for users that do not have IBM Cloud accounts
• Invite users and manage their access

6. Configure your firewall

To configure your firewall to enable access to the IBM Quantum API endpoints, add the following URLs to your allowlist:

• IBM Cloud global services:
  cloud.ibm.com
  iam.cloud.ibm.com
  api.global-search-tagging.cloud.ibm.com
  globalcatalog.cloud.ibm.com
  resource-controller.cloud.ibm.com

• IBM Quantum Qiskit Runtime services - region us-east:
  quantum.cloud.ibm.com
  s3.us-east.cloud-object-storage.appdomain.cloud

• IBM Quantum Qiskit Runtime services - region eu-de:
  eu-de.quantum.cloud.ibm.com
  s3.direct.eu-de.cloud-object-storage.appdomain.cloud

• IBM Quantum Qiskit Functions preview service:
  qiskit-serverless.quantum.ibm.com

Next steps