Help Center> ModelArts> Preparations> Configuring Access Authorization (Global Configuration)> Overview
View PDF

Overview

When you use ExeML, data management, notebook instances, training jobs, models, and services, ModelArts may need to access dependent services such as OBS, Intelligent EdgeFabric (IEF), and Software Repository for Container (SWR). If ModelArts is not authorized to access the services, these functions cannot be used.

You can configure access authorization in either of the following ways:

  • Using an agency (recommended)

    After agency authorization is configured, the dependent service operation permissions are delegated to ModelArts so that ModelArts can use the dependent services and perform operations on resources on your behalf. On HUAWEI CLOUD, you can only use an account to create an agency and authorize IAM users under the account.

  • Using the access key

    You can use the obtained access key pair (AK/SK) to authorize ModelArts to access dependent services and and perform operations on resources.

Precautions

  • Agency authorization grants ModelArts permissions on dependent services, such as OBS, IEF, and SWR. If the OBS permissions are not configured for an IAM user, the user still does not have the permission to operate the services.
  • For users who have used ModelArts before, access key authorization has been configured and does not need to be configured again. However, you are advised to use agency authorization again.
  • For new users, you are advised to use agency authorization.

Differences Between Agency Authorization and Access Key Authorization

Table 1 Differences between authorization methods

Item

Agency (Recommended)

Access Key

Configured by

HUAWEI CLOUD account

HUAWEI CLOUD account or IAM user

Configured for
  • Current HUAWEI CLOUD account
  • All IAM users under the current account

The current user (the HUAWEI CLOUD account), can be configured only for the current account.

Validity period

You can set the validity period of an agency to permanent or one day.

Access keys are always valid if they are not changed on the My Credentials page. Once the access key is changed, you need to update it on the ModelArts Settings page in a timely manner. Otherwise, ModelArts functions are unavailable.

Permissions

ModelArts permissions can be configured separately, which is more flexible.

The permissions are the same as those of the user group to which the user belongs.

Usage method

On the ModelArts Settings page, you can complete authorization and create an agency with one click, which is easier to use.

To do so, download the credential file to obtain the access key and complete authorization on the ModelArts Settings page.