Help Center/ Object Storage Migration Service/ FAQs/ Product Consulting/ How Do I Obtain Required Permissions for the Source and Destination Platform Accounts?
Updated on 2025-12-08 GMT+08:00
View PDF

How Do I Obtain Required Permissions for the Source and Destination Platform Accounts?

Source Permissions

The following uses an OBS bucket on Huawei Cloud as the source bucket. If your source bucket is on another cloud platform, contact engineers of the cloud platform.

The source platform account needs the permissions for:
  • Listing all buckets
  • Obtaining bucket locations
  • Listing objects
  • Obtaining object metadata
  • Obtaining object content

You can use either of the following methods to obtain required permissions for the source platform account:

  • Use system-defined roles OBS Administrator and KMS Administrator. For details, see Creating a User Group and Assigning Permissions.
  • Create a custom policy that defines the permissions to list all buckets, obtain bucket location, list objects, obtain object metadata, and obtain object content.
    1. Log in to the IAM console.
    2. In the navigation pane on the left, choose Permissions > Policies/Roles.
    3. Click Create Custom Policy in the upper right corner.

    4. Enter a policy name and select JSON for Policy View.
    5. Copy the following content to the box next to Policy Content and click OK. 

      {
    "Version": "1.1",
    "Statement": [
        {
            "Action": [
                "obs:bucket:ListAllMyBuckets",
                "obs:bucket:GetBucketLocation",
                "obs:bucket:ListBucket",
                "obs:object:GetObject"
            ],
            "Resource": [
                "obs:*:*:bucket:*",
                "obs:*:*:object:*"
            ],
            "Effect": "Allow"
        }
    ]
}

After the custom policy is created, perform the following operations to obtain the permissions defined by the custom policy:

  • You must be able to access Huawei Cloud through both the programmatic and management console access methods.
  • It takes 15 to 30 minutes for the authorization to take effect.

Destination Permissions

The destination platform account needs the permissions for:
  • Listing objects in a bucket
  • Obtaining bucket locations
  • Listing buckets
  • Obtaining object metadata
  • Modifying object metadata
  • Obtaining object content
  • Uploading an object
  • Listing multipart uploads
  • Restoring archived objects
You can use either of the following methods to obtain required permissions for the destination platform account:
  • Use system-defined roles OBS Administrator and KMS Administrator. For details, see Creating a User Group and Assigning Permissions.
  • Create a custom policy.
    1. Log in to the IAM console.
    2. In the navigation pane on the left, choose Permissions > Policies/Roles.
    3. Click Create Custom Policy in the upper right corner.

    4. Enter a policy name and select JSON for Policy View.
    5. Copy the following content to the box next to Policy Content and click OK. 
      {
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "obs:bucket:GetBucketLocation",
                "obs:bucket:ListBucketMultipartUploads",
                "obs:object:RestoreObject",
                "obs:object:GetObject",
                "obs:object:ModifyObjectMetaData",
                "obs:bucket:ListBucket",
                "obs:object:PutObject"
            ],
            "Resource": [
                "OBS:*:*:bucket:*",
                "OBS:*:*:object:*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "obs:bucket:ListAllMyBuckets"
            ]
        }
    ]
}

After the custom policy is created, perform the following operations to obtain the permissions defined by the custom policy:

  • You must be able to access Huawei Cloud through both the programmatic and management console access methods.
  • It takes 15 to 30 minutes for the authorization to take effect.
Parent topic: Product Consulting