Help Center/ Resource Formation Service/ User Guide/ IAM-based Permissions Management/ Creating a User and Granting Permissions to Use RFS Based on Identity Policies
Updated on 2026-01-08 GMT+08:00
View PDF

Creating a User and Granting Permissions to Use RFS Based on Identity Policies

To manage permissions for RFS based on identities, . With IAM, you can:

  • Use your to create IAM users or groups for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for using RFS.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust or a cloud service to perform efficient O&M on your RFS.

If your meets your permissions requirements, you can skip this section.

This section describes how to perform identity policy-based authorization. Figure 1 shows the process flow.

Prerequisites

Learn about the permissions supported by RFS, and choose policies or roles according to your requirements.

Process Flow

Figure 1 Process for granting RFS permissions
  1. .

    Log in to the IAM console to create a user or user group.

  2. Attach a system-defined policy to the user or user group.

    Assign the RF ReadOnlyAccess system-defined policy to the user or user group.

  3. and verify permissions.

    Log in to the console as an authorized user and verify the permissions.

    • Choose Service List > Resource Formation Service. On the RFS console, click Stacks to go to the stack list, and delete a stack. If the stack cannot be deleted (assume that the current permissions contain only RF ReadOnlyAccess), the RF ReadOnlyAccess policy has taken effect.
    • Choose another service from the Service List. If a message appears, indicating that you have insufficient permissions to access the service (assume that the current permissions contain only RF ReadOnlyAccess), the RF ReadOnlyAccess policy has taken effect.