Creating a User and Granting Permissions

Use IAM to implement fine-grained permissions control for your Global Accelerator resources. With IAM, you can:

Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing Global Accelerator resources.
Grant only the permissions required for users to perform a specific task.
Delegate another HUAWEI ID or cloud service to perform professional and efficient O&M on your Global Accelerator resources.

Skip this part if your HUAWEI ID does not require individual IAM users.

Figure 1 shows the process for granting permissions.

Prerequisites

You have learned about Global Accelerator permissions that can be assigned to the user group and select permissions based on actual requirements. For details about the system permissions of Global Accelerator, see Permissions. For the system policies of other services, see System Permissions.

Process Flow

Figure 1 Process for granting permissions

On the IAM console, create a user group and grant it permissions (GA FullAccess as an example).
Create an IAM user and add it to the user group.
Log in as the IAM user and verify permissions.
In the authorized region, perform the following operations:
- Click on the upper left corner to display Service List and choose Networking > Global Accelerator. Click Buy Global Accelerator in the upper right corner. If the global accelerator is created, the GA FullAccess policy is in effect.
- Choose another service in Service List. If a message appears indicating that you do not have permissions to access the service, the GA FullAccess policy is in effect.