Help Center> Object Storage Service> Console Operation Guide> Getting Started> Configuring User Permissions
View PDF

Configuring User Permissions

If your cloud service account does not need individual IAM users, then you may skip this section. Your permissions to use OBS functions are not affected.

If IAM users are required, you need to grant OBS access permissions to the users, because OBS is separately deployed from other cloud resources.

Process

Figure 1 Granting an IAM user the access permissions to OBS
  1. Create a user group and assign permissions to it.

    Create a user group on the IAM console, and attach the OBS ReadOnlyAccess policy to the group.

  2. Create an IAM user.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify permissions.

    Log in to the OBS console by using the newly created user, and verify that the user only has the permissions for OBS.

    • Choose Object Storage Service from the service list. The home page of OBS Console is displayed. If the list of buckets is displayed and you can view objects in any bucket but cannot upload objects, download objects, or perform other operations on objects, the OBS ReadOnlyAccess policy has already taken effect.
    • In the navigation pane on the left, choose CDN. If a message is displayed indicating insufficient permissions to perform the operation, the OBS ReadOnlyAccess policy has already taken effect.
Parent topic: Getting Started