Creating a User and Granting Permissions
This section describes the fine-grained permissions management provided by Identity and Access Management (IAM) for your AOM. With IAM, you can:
- Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to AOM resources.
- Grant only the permissions required for users to perform a task.
- Entrust an account or a cloud service to perform professional and efficient O&M on your AOM resources.
If your account does not need individual IAM users, then you may skip over this chapter.
This section describes the procedure for granting permissions (see Figure 1).
Prerequisites
Before assigning permissions to user groups, you should learn about the AOM permissions listed in Permissions Management. For the system permissions of other services, see System Permissions.
Process
- Creating a User Group and Assigning Permissions
Create a user group on the IAM console, and assign the AOM ReadOnlyAccess policy to the group.
- Creating an IAM User
Create a user on the IAM console and add the user to the group created in 1.
- Logging In Using an IAM User and Verifying Permissions
Log in to the AOM console as the created user, and verify that it only has read permissions for AOM.
Last Article: Permissions Management
Next Article: Creating a Custom Policy

Did this article solve your problem?
Thank you for your score!Your feedback would help us improve the website.