Managing Permissions Assigned to IAM Users

Constraints

• If the principal type of the authorization record is a user group, deleting the permissions will affect all users in the group. To remove the assigned permissions, go to the user group details page.
• Deleting the permissions of an IAM user will also delete the permissions assigned to the group that the user belongs to. All users in the group will no longer have the permissions. Exercise caution when performing this operation.

Procedure

• Managing Role/Policy-based Authorization
  1. Log in to the IAM console as the administrator.
  2. Click a username to go to the user details page.
  3. Click the Permissions tab to view the permissions assigned to the IAM user. You can assign, delete, and export permissions for the user on this page.
     Figure 1 Permissions assigned to an IAM user
     

• Managing Identity Policy-based Authorization

  To view the identity policy-based authorization on the new console, perform the following operations:

  1. Log in to the IAM console as the administrator.
  2. Click a username to go to the user details page.
  3. In the Permissions tab, click Check identity policy-based authorization records. You can assign and delete export permissions for the user here.
     

     After you click Authorize in the displayed pane on the left, you will go to the new console. You can assign permissions to the user using identity policies.

Related Operations

To view all authorization records under your account, see Authorization Records.