Help Center> Tag Management Service> User Guide> Permissions Management> Creating a User and Granting Permissions
View PDF

Creating a User and Granting Permissions

This section describes how to use IAM to implement fine-grained permissions control for your TMS. With IAM, you can:

  • Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to TMS resources.
  • Grant only the permissions required for users to perform a task.
  • Entrust a HUAWEI CLOUD account or cloud service to perform professional and efficient O&M on your TMS resources.

If your HUAWEI CLOUD account does not need individual IAM users, then you may skip over this topic.

Prerequisites

Learn about the permissions (see System Permissions) supported by TMS and choose policies or roles according to your requirements. For the permissions of other services, see System Permissions.

Process Flow

Figure 1 Process for granting TMS permissions
  1. Create a user group and grant permissions to it.

    Create a user group on the IAM console, and attach the TMS Administrator policy to the group.

  2. Create an IAM user.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify permissions.

    Log in to the TMS console as the created user, and verify that it only has the TMS Administrator permissions.

Parent topic: Permissions Management