Permission Management
Use Identity and Access Management (IAM) to manage OMS permissions and grant your employees with different access permissions. IAM provides fine-grained identity authentication, permissions management, and access control, helping you securely manage access to your HUAWEI CLOUD OMS resources.
With IAM, you can use your HUAWEI CLOUD account to create IAM users for your employees, and assign permissions to the users to control their access to specific resource types. For example, some software developers in your enterprise need to use OMS resources but must not delete them or perform any high-risk operations. To achieve this result, you can create IAM users for the software developers and grant them only the permissions required for using OMS resources.
If your HUAWEI CLOUD account does not need individual IAM users for permissions management, you may skip over this section.
IAM is free. You pay only for the resources in your account. For more information about IAM, see IAM Service Overview.
OMS Permissions
By default, new IAM users do not have any permissions granted. You need to add a user to one or more groups, and assign policies or roles to these groups. The user then inherits permissions from the groups it is a member of. This process is called authorization. After authorization, the user can perform specified operations on cloud services based on the permissions.
OMS is a project-level service deployed in specific physical regions. To assign OMS permissions to a user group, specify the scope as region-specific projects and select projects for the permissions to take effect. If All projects is selected, the permissions will take effect for the user group in all region-specific projects. When accessing OMS, the users need to switch to a region where they have been authorized to use this service.
Table 1 lists all system-defined roles of OMS. Because services on HUAWEI CLOUD interact with each other, the OMS roles are dependent on the roles of other services. Therefore, when assigning OMS roles to a user, you need to also assign the dependent roles to the user for the OMS permissions to take effect.
Helpful Links
- IAM Service Overview
- For details about how to create a user group and user and assign OMS permissions, see Creating a User and Using OMS.
Last Article: Pricing Details
Next Article: Personal Data Protection Mechanism
Did this article solve your problem?
Thank you for your score！Your feedback would help us improve the website.