On this page

Show all

Help Center/ Cloud Firewall/ User Guide/ Creating a User Group and Granting Permissions

Creating a User Group and Granting Permissions

Updated on 2024-11-04 GMT+08:00

View PDF

This section describes how to use Identity and Access Management (IAM) to implement fine-grained permissions control for your CFW resources. With IAM, you can:

Create IAM users for employees in different departments based on your organizational structure. Each IAM user has their own security credentials used to access CFW resources.
Grant only the permissions required for users to perform a task.
Entrust an account or cloud service to perform professional and efficient O&M on your CFW resources.

If your Huawei account does not require individual IAM users, skip this chapter.

This topic describes the procedure for granting permissions (see Figure 1).

Prerequisites

Learn about the permissions supported by CFW in Table 1 and choose policies or roles based on your requirements.

**Table 1** System policies supported by CFW
Role Name	Description	Category	Dependency
CFW FullAccess	All permissions for CFW	System-defined policy	None
CFW ReadOnlyAccess	Read-only permissions for CFW	System-defined policy	None

Process Flow

Figure 1 Process for granting permissions

Create a user group and assign permissions.
Create a user group on the IAM console, and attach the CFW ReadOnlyAccess policy to the group.
Creating an IAM User.
Create a user on the IAM console and add the user to the group created in 1.
Log in and verify permissions.
Log in to the CFW console by using the newly created user, and verify that the user only has CFW Administrator permissions for CFW.
- Choose Cloud Firewall in the service list. Click Buy CFW on the CFW console. If you cannot buy CFW (assuming that only the CFW FullAccess permission is granted), the CFW FullAccess policy has already taken effect.
- Choose any other service in Service List. Assume that the current policy contains only the CFW FullAccess permission. If a message appears indicating that you have insufficient permissions to access the service, the CFW FullAccess policy has already taken effect.

Next topic: Checking the Dashboard

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel