IBM i Global

 View Only

 An environment to integrate with an IGA solution

IGA Stuff's profile image
IGA Stuff posted Wed November 19, 2025 12:47 AM

Hi all,

I'm green to the IBM i world.

I'm trying to spin an environment to allow me to integrate with an Identity Governance and Administration (IGA) solution.

In high level, I want to be able to read accounts and their permissions and to create accounts and assign relevant access. 

According to this estimation, the price is a bit expensive (~1000 USD per month)

Few questions:

With the below setup, will it allow me to perform the needed integration?

If not, can advise on a more suitable approach? 

Are there any other alternatives (cheaper ones) to it?

Thanks

Ricardo Martins's profile image
Ricardo Martins IBM Champion

Hello,

If you are using only 0.25 Cores, or up to 4 Cores, choose a S1022 or a S922 on the "Machine type" box, the price will drop ~$400 with that same config.

Regards.

IGA Stuff's profile image
IGA Stuff

Thanks for your input @Ricardo Martins

From your experience, do you think this environment will be sufficient to address my use case? 

Ricardo Martins's profile image
Ricardo Martins IBM Champion

That will depend on your specific use case, including the number of users and the type of operations you plan to run.
Based on the estimate you shared, you’ve only allocated a 100GB boot volume—which is likely insufficient. You’ll probably need additional storage.

One of the great things about PowerVS is its flexibility—you can spin up an environment, test it for just a few hours or days, and only pay for the time you actually use. It’s perfect for short-term experiments or proof-of-concepts without long-term commitment.

IGA Stuff's profile image
IGA Stuff

I should have been more specific with my question.

To perform discovery of accounts and their access rights, I will need to connect over JDBC to the DB and retrieve the data. Usually from BAU_UTILS.IAMPRF

To provision access, usually we rely on SSH connectivity and executing CL commands.

Given these requirements, do you know if the virtual env provides this kind of access? 

IGA Stuff's profile image
IGA Stuff

@Ricardo Martins - any thoughts? 

Ricardo Martins's profile image
Ricardo Martins IBM Champion

Hi @IGA Stuff,


Yes, PowerVS allows you to do everything you can do on‑prem IBM i wise.

You can connect over JDBC to IBM i databases (DB2 for i) running inside your PowerVS instances. Once you configure network access (floating IP, VPN, or Direct Link), schemas such as BAU_UTILS.IAMPRF are fully accessible for account and access discovery, just as they are on‑prem.
SSH is the standard access method in PowerVS. You upload your keys at workspace or account scope, connect via floating IP, VPN or Direct Link, and then execute CL commands directly on IBM i. This is the same workflow you’d use on‑prem, only with cloud networking in the mix.

Regards