Help Center> Business Recovery Service> Service Overview> Permissions Management
View PDF

Permissions Management

If you need to assign different permissions to employees in your enterprise to access your SDRS resources, Identity and Access Management (IAM) is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, helping you secure access to your HUAWEI CLOUD resources.

With IAM, you can use your HUAWEI CLOUD account to create IAM users for your employees, and assign permissions to the users to control their access to specific resource types.

If your HUAWEI CLOUD account does not need individual IAM users for permissions management, you may skip over this chapter.

IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see the IAM Service Overview.

Supported System Policies

A policy is a set of permissions defined in JSON format. By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and assign permissions policies to these groups. The user then inherits permissions from the groups it is a member of. This process is called authorization. After authorization, the user can perform specified operations on SDRS based on the permissions. IAM provides system policies that define the common permissions for different services, such as administrator and read-only permissions. You can directly use these system policies to assign permissions.

SDRS is a project-level service deployed in specific physical regions. Therefore, SDRS permissions are assigned to users in specific regions (such as CN North-Beijing1) and only take effect for these regions. If you want the permissions to take effect for all regions, you need to assign the permissions to users in each region. When accessing SDRS, the users need to switch to a region where they have been authorized to use SDRS.

Table 1 lists all the system policies supported by SDRS. Dependencies are policies on which a system policy depends to take effect. For example, the SDRS policy is dependent on the policies of other services. When assigning SDRS permissions to users, you need to also assign dependent policies for the SDRS permissions to take effect.

Table 1 System policies supported by SDRS

Policy Name

Description

Dependencies

SDRS Administrator

Administrator permissions for SDRS

Dependent on the Tenant Guest and Server Administrator policies.

  • Tenant Guest: A global policy, which must be assigned in the Global project.
  • Server Administrator: A project-level policy, which must be assigned in the same project as the SDRS Administrator policy

Helpful Links