Diese Seite ist in Ihrer lokalen Sprache noch nicht verfügbar. Wir arbeiten daran, weitere Sprachversionen hinzuzufügen. Vielen Dank für Ihre Unterstützung.
- What's New
- Function Overview
-
User Guide
-
Enterprise Center
- Overview
- Enabling Enterprise Center
- Accessing the Enterprise Center
- Disabling Enterprise Center
-
Unified Accounting Management
- Enabling Unified Accounting Management
- Organization Management
- Benefits Management
- Restrictions
- Permissions Policies and Supported Actions
- CTS
-
Non-unified Accounting Management (To Be Deprecated)
- Organization Management
-
Accounting Management
-
Allocation and Invoicing
- Allocating Account Balance, Credit Limit, and Cash Coupons
- Withdrawing Account Balance, Credit Limit, and Cash Coupons
- Viewing Financial and Expenditure Information of Member Accounts
- Viewing Order Information of Member Accounts
- Setting a Repayment Priority Account
- Enabling/Disabling Account Transaction Protection
- Viewing Fund Transfer Details
-
Allocation and Invoicing
-
FAQs
-
Common Issues
- What Are the Differences Between IAM Users and Enterprise Member Accounts?
- What Should I Do If the Organization and Account Information Is Unavailable to an IAM User?
- What Requirements Must an Account Meet to Function as a Master Account?
- What Can I Do If the Master Account Cannot Associate with a Member Account Whose Type and Enterprise Name Have Not Been Specified?
- What Can I Do If the Master Account Cannot Associate with an Individual Member Account?
- In What Scenarios Does an Enterprise Master Account Create an Enterprise Member Account? What Is the Real-Name Authentication Information of the Created Member Account?
- How Do I Apply for Enterprise Management Accounts for a Company and Its Subsidiaries and Branches?
- Why Cannot an IAM User of My Enterprise Master Account Cannot View Details About My Member Accounts?
- How Do I Delete an Enterprise Member Account?
- How Many Member Accounts Can I Associate with My Enterprise Master Account?
-
Unified Accounting Management
- What Is Unified Accounting Management? How Can I Enable It?
- What Changes Will Be Caused to an Enterprise Master Account and Its Member Accounts After Unified Accounting Management Is Enabled?
- How Will the Resources Purchased by Enterprise Member Accounts and the Refund for Unsubscription Be Handled After Unified Accounting Management Is Enabled?
- Can a Member Account Use the Credit, Cash Coupons, and Commercial Discounts of the Master Account to Pay For Services?
- How Does a Master Account and Its Member Accounts Check Whether Unified Accounting Management Has Been Enabled?
- How Can I Enable Unified Accounting Management for My Master Account?
- Where Can a Master Account and Its Member Accounts View Accounting Information After Unified Accounting Management Is Enabled?
- Can Internal Customers Enable Unified Accounting Management?
- Which Payment Scenarios of an Enterprise Member Account Are Affected by the Payment Method Set by the Enterprise Master Account for the Enterprise Member Account?
-
Non-unified Accounting Management
- What Requirements Must an Enterprise Master Account Meet to Associate with Another Account?
- What Are the Requirements for Canceling Associations Between an Enterprise Master Account and Its Member Account?
- How Does the Member Account of a Majority-Owned, Joint Stock, or Directly Controlled Subsidiary Apply to Share the Commercial Discounts of the Master Account Used by the Parent Company?
- Why Can't My Member Account Share the Same Commercial Discounts as the Master Account of the Parent Company?
- Can an Enterprise Master Account Allocate Funds to an Enterprise Member Account?
- Why Can't an Enterprise Master Account Allocate Cash Coupons to a Member Account?
- Can an Enterprise Master Account Allocate a Credit Limit to an Enterprise Member Account?
- Who Pays the Fee After an Enterprise Member Account Uses the Allocated Credit?
- Is an Enterprise Master Account Allowed to Request Invoices for a Member Account at the Huawei Cloud International Website?
- Are the Subsidiaries (Member Accounts) of an Enterprise (Master Account) Allowed to Share Its Commercial Discounts and Credits?
- What Information About the Master Account Will Be Inherited by a Newly Created Member Account?
- Credit Repayment Priority
-
Common Issues
-
Project Management
- What Is Enterprise Project Management Service?
- Applicable Scenarios
- Supported Cloud Services
- Restrictions and Limitations
- Permissions
- Enabling the Enterprise Project Function
- Accessing the Enterprise Project Management Service Page
- Getting Started
- Multi-project Management Cases
- Managing Enterprise Projects
- Managing Resources in an Enterprise Project
- Personnel Management
- Quotas
- Accounting Management
-
FAQs
- What Are the Differences Between IAM and Enterprise Management?
- What Are the Differences Between IAM Projects and Enterprise Projects?
- What Are the Differences Between IAM Users and Enterprise Member Accounts?
- How Can I View All Enterprise Projects?
- How Do I Obtain an Enterprise Project ID?
- How Many Enterprise Projects Can I Create?
- Will Adding or Removing a Resource from an Enterprise Project Change the VPC and Related IPs of the Resource?
- How Do I Limit Specific Enterprise Projects to Different IAM Users?
-
Enterprise Center
- API Reference
- SDK Reference
Show all
Scenario
A company needs to manage multiple project teams and assign resources and personnel to different projects. This section presents the best practice for multi-project management to address company A's requirements.
Requirements
- Requirement 1: The company needs resources in EU-Dublin. The resources will be allocated to two project teams. Resources of the two project teams need to be isolated from each other. Resource access needs to be authorized, for example, only authorized IAM users can access a specific ECS.
- Requirement 2: Members in a team cannot access resources of other teams and only have the least privilege required to complete related tasks.
- Requirement 3: Costs can be managed independently for the tow project teams
Solution
- Solution to requirement 1: Enterprise Project Management (EPS) and Identity and Access Management (IAM) can both help you isolate resources between projects. However, the implementation logic and functions of the two services are different.
- EPS: An enterprise project can contain resources of different regions, and resources in different enterprise projects are logically isolated. You can add resources to and remove resources from an enterprise project.
- IAM: An IAM project can contain resources of only one region, and resources in different IAM projects are physically isolated.
- Solution to requirement 2: The company can use IAM to create users and user groups; add users to the user groups as needed; add add user groups to enterprise projects created based on requirement 1; and assign permissions to user groups based on table 10-1.
Figure 1 Personnel management model
Table 1 User group permissions User Group
Responsibility
Permissions
Description
Accounting team
Project expenditure management
Enterprise Project BSS FullAccess
Permissions for accounting management of enterprise projects
Development team
Project development
ECS FullAccess
Full permissions for Elastic Cloud Server (ECS)
OBS FullAccess
Full permissions for Object Storage Service (OBS)
ELB FullAccess
Full permissions for Elastic Load Balance (ELB)
Security maintenance team
Security O&M of the project
ECS CommonOperations
Permissions for basic ECS operations
CAD Administrator
Full permissions for Advanced Anti-DDoS (AAD)
Operations team
Overall operations of the project
EPS FullAccess
Full permissions for EPS, including modifying, enabling, disabling, and viewing enterprise projects.
- Solution to requirement 3: The company can use EPS to independently manage renewals, orders, accounting, unsubscriptions, changes, and quotas of each enterprise project. For details, see Enterprise Project Accounting Management.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.