Projects

Updated on 2024-10-31 GMT+08:00

View PDF

Projects are used to isolate resources (including compute, storage, and network resources) among physical regions. A project is provided for each region by default, and permissions are assigned based on projects.

For more refined access control, create subprojects under a project and purchase resources in the subprojects. Then, provide users with permissions to access resources in specific subprojects.

IAM projects are different from enterprise projects. For details about their differences, see What Are the Differences Between IAM Projects and Enterprise Projects?

Figure 1 Project isolation
Click to enlarge

NOTE:

Resources cannot be transferred across IAM projects.
You cannot create projects in IAM after enabling the Enterprise Project function.

Creating a Project

In the left navigation pane on the IAM console, choose Projects and click Create Project.

Figure 2 Creating a project
Select a region in which you want to create a subproject.
Enter a project name.
NOTE:
- The project name will be in the format "Name of the default project for the selected region_Custom project name". The name of default projects cannot be modified.
- The project name can only contain letters, digits, hyphens (-), and underscores (_). The total length of the project name cannot exceed 64 characters.
(Optional) Enter a description for the project.
Click OK.

Granting a User Group Permissions for a Project

You can assign permissions based on projects to control access to resources in specific projects.

In the user group list, click Authorize in the row containing the target user group.

Figure 3 Managing permissions
On the Authorize User Group page, select the policies or roles to be attached to the user group and click Next.
Specify the authorization scope. If you select Region-specific projects, select one or more projects.
Click OK.

NOTE:

For more information about user group authorization, see Creating a User Group and Assigning Permissions.

Switching Regions or Projects

For project-level services, switch to a region or project in which you have been authorized to access cloud services. You do not need to switch regions or projects for global services.

Log in to the Huawei Cloud management console.
Go to a project-level cloud service page. Click the drop-down list box in the upper left corner of the page and select a region.

Previous topic: Cloud Services that Support Resource-Level Authorization Using IAM

Next topic: Agencies