User Permissions

Scenario

To manage SWR permissions, you can use Identity and Access Management (IAM). If you have the SWR Administrator or Tenant Administrator permission, you become an admin user of SWR accounts. You can grant permissions to other IAM users in SWR.

If you are not an SWR account admin user, you can request an SWR account admin user to grant you permissions to read, write, or manage a specific image or images in a specific organization.

• An SWR account admin user is granted image management permission of all organizations by default, even if the user is not in the authorized user list of the organizations.

Authorization Method

You can grant permissions to users in SWR by using either of the following methods:

• Grant permissions on an image details page to allow users to read, write, and manage a specific image.
• Grant permissions on an organization details page to allow users to read, write, and manage all the images in an organization.
  Figure 1 User permissions
  

You can grant the following three types of permissions to users:

• Read: Users can only pull images.
• Write: Users can pull and push images and edit image attributes.
• Manage: Users can pull and push images, delete images or tags, edit image attributes, grant permissions, and share images with other users.

To upload images to an organization, you require the write or manage permission for the organization to which images are uploaded. Write and manage permissions added on the image details pages will not be sufficient to upload images.

Granting Permissions for a Specific Image

To allow users to read, write, and manage a specific image, grant corresponding permissions to them on the details page of this image.

1. Log in to the SWR console.
2. In the navigation pane, choose My Images and click the desired image.
3. On the image details page, click the Permissions tab.
4. Click Add Permission. On the page displayed, click Read, Write, or Manage in the row of the desired username. Click OK to confirm.

Modifying or Deleting Permissions for a Specific Image

You can also modify or delete user permissions on the image details page.

• To modify permissions, click Modify in the row of the desired username on the Permissions tab page. Select a permission in the Permission drop-down list, and click Save in the Operation column.
• To delete permissions, click Delete in the row of the desired username on the Permissions tab page, enter DELETE in the dialog box displayed, and then click Yes.

Granting Permissions for an Organization

To allow users to read, write, and manage all the images in an organization, grant corresponding permissions to them on the details page of this organization.

Only users with the Manage permission can grant permissions for other users.

1. Log in to the SWR console.
2. In the navigation pane, choose Organization Management. Then click Details in the row of the desired organization.
3. On the Users tab page, click Add Permission. In the dialog box displayed, select permissions for users and click OK.

Modifying or Deleting Permissions for an Organization

You can also modify and delete user permissions of an organization.

• To modify permissions, click Modify in the row of the desired username on the Users tab page. Select a permission in the Permission drop-down list, and click Save in the Operation column.
• To delete permissions, click Delete in the row of the desired username on the users tab page, enter DELETE in the dialog box displayed, and then click Yes.