Help Center/ Identity and Access Management/ User Guide/ IAM User Management/ Managing Permissions Assigned to IAM Users
Updated on 2025-12-01 GMT+08:00
View PDF

Managing Permissions Assigned to IAM Users

As an administrator, you can view or delete permissions assigned to IAM users on the Permissions tab of the IAM console.

Constraints

  • If the principal type of the authorization record is a user group, deleting the permissions will affect all users in the group. To remove the assigned permissions, go to the user group details page. For details, see Managing Permissions Assigned to IAM Users.
  • Deleting the permissions of an IAM user will also delete the permissions assigned to the group that the user belongs to. All users in the group will no longer have the permissions. Exercise caution when performing this operation.

Procedure

  • Managing Role/Policy-based Authorization
    1. Log in to the IAM console as the administrator.
    2. Click a username to go to the user details page.
    3. Click the Permissions tab to view the permissions assigned to the IAM user. You can assign, delete, and export permissions for the user on this page.
      Figure 1 Permissions assigned to an IAM user

Related Operations

To view all authorization records under your account, see Authorization Records.

Parent topic: IAM User Management