Querying a Grant

This section describes how to view the details about a custom key grant on the KMS console, such as the grant ID, grantee user ID, granted operation, and creation time.

Prerequisites

You have created a grant.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security & Compliance > Data Encryption Workshop.
  4. Click the alias of the desired custom key to view its details.
  5. Click the Grants tab. Information about the custom key and grants created on it are displayed. See Figure 1.

    Figure 1 Grant tab page

    Table 1 describes the parameters.

    Table 1 Parameter description

    Parameter

    Description

    Grant ID

    Randomly generated unique identification of a grant

    Granted To

    Whether permissions are granted to a user or account.

    Grantee ID

    ID of the authorized user or account.

    Granted Operations

    Authorized operations (such as Create Data Key) on the custom key

    Created

    Creation time of the grant

    Operation

    Operations that can be performed on a grant. For example, you can revoke a grant.

  6. Click a grant ID to view the grant details. For details, see Figure 2.

    Figure 2 Viewing grant details