Help Center/ Identity and Access Management/ User Guide/ IAM User Management/ Modifying Security Settings for an IAM User
Updated on 2025-12-01 GMT+08:00
View PDF

Modifying Security Settings for an IAM User

As an administrator, you can modify the password, MFA device, login protection, and access keys of an IAM user.

Constraints

  • If the password of an IAM user is automatically generated, it cannot be changed on the Security Settings tab of the IAM console. To change the password, go to the Basic Information page of My Account.
  • IAM users can change their passwords on the Basic Information tab. If you want to change the password of your account, see How Do I Change My Password?
  • By default, only the IAM user's MFA device can be changed on the Security Settings tab. The MFA device of the account cannot be changed. To change the MFA device of the account, grant the permissions needed to add and unbind the MFA device.
  • The mobile number and email address of the IAM user cannot be the same as those of the account or other IAM users.

Changing the Password of an IAM User

As an administrator, you can reset the password of an IAM user if the user has forgotten the password and no email address or mobile number has been bound to the user.

  1. Log in to the IAM console as the administrator.
  2. In the user list, click a username or click Security Settings in the Operation column to access the user details page.

    Figure 1 Changing the password of an IAM user

  3. Click the Security Settings tab. In the Login Credentials area, click in the Login Password row to reset the login password for the IAM user.

    • Set by user: A one-time login URL will be emailed to the user. The user can then click the link to set a password.
    • Automatically generated: A password will be automatically generated and then sent to the user by email.
    • Set now: You set a new password and send the new password to the user.

Changing the MFA Device for an IAM User

You can only change the MFA device for an IAM user, but not for the account.

  1. Log in to the IAM console as the administrator.
  2. In the user list, click a username or click Security Settings in the Operation column to access the user details page.
  3. Click the Security Settings tab and change the MFA device of the IAM user.

    • Change the mobile number or email address of the user.

      The mobile number and email address of the IAM user cannot be the same as those of the account or other IAM users.

    • Reset the MFA device for a user. For more information about MFA and virtual MFA device, see MFA Authentication.

Modifying the Login Protection Configuration for an IAM User

Login protection is disabled by default. If you enable this option, the user will need to enter a verification code in addition to the username and password when logging in to the console.

  1. Log in to the IAM console as the administrator.
  2. In the user list, click a username or click Security Settings in the Operation column to access the user details page.
  3. Click the Security Settings tab and modify the login protection configuration of the IAM user. This option is disabled by default. You can choose from the following methods for secondary verification:

    • SMS
    • Email address
    • Virtual MFA device

Related Operations

Parent topic: IAM User Management