Help Center> Graph Engine Service> User Guide> Permissions Management> Creating a User and Granting Permissions
View PDF

Creating a User and Granting Permissions

This section describes how to use IAM to implement fine-grained permissions control for your GES resources. With IAM, you can:

  • Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to GES resources.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust a HUAWEI CLOUD account or cloud service to perform professional and efficient O&M on your GES resources.

If your HUAWEI CLOUD account does not need individual IAM users, then you may skip over this chapter.

Prerequisites

  • GES ReadOnlyAccess is a policy.
  • Learn about the permissions (see GES System Permissions) supported by GES and choose policies or roles according to your requirements. For the permissions of other services, see Permissions Policies.

Process Flow

This section describes how to use a group to grant permissions to a user. Figure 1 shows the process for granting permissions.

Figure 1 Process for granting GES permissions

  1. Create a user group and assign permissions to it.

    Create a user group on the IAM console, and assign the GES ReadOnlyAccess policy to the group.

  2. Create an IAM user.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in as the user and verify permissions.

    Log in to the GES console using the newly created user, switch to the authorized region, and verify the user's permissions.

    • Choose Service List > Graph Engine Service to enter the GES management console, and click Create Graph in the upper right corner to create a graph. If you cannot create one, the GES ReadOnlyAccess policy has taken effect.
    • Choose any other service in Service List. If a message appears indicating that you have insufficient permissions to access the service, the GES ReadOnlyAccess policy has already taken effect.
Parent topic: Permissions Management