Creating an IAM User and Logging In

Scenario

Use the account created in the previous section to create an IAM user and add the IAM user to the developer group. The IAM user has their own username and password. They can log in to Huawei Cloud and use resources based on assigned permissions.

Process Flow

Step 1: Create an IAM User

1. Choose Users from the navigation pane, and click Create User.
2. Specify the user details and access type.
   1. Enter a user name.
      Figure 1 Configuring user information
      
      

      IAM users can log in to Huawei Cloud using the username, email address, or mobile number.

      Table 1 User details

      Parameter	Example	Description
      Username	Alice	(Mandatory) Username used by an IAM user to log in to Huawei Cloud.
      Email Address	Skip	Email address of the IAM user that can be used as a login credential. IAM users can bind an email address after they are created. This parameter is mandatory if you select Set by user for Credential Type.
      Mobile Number	Skip	(Optional) Mobile phone number of the IAM user that can be used as a login credential. IAM users can bind a mobile number after they are created.
      External Identity ID	Skip	Identity of an enterprise user in IAM user SSO. This parameter is mandatory if virtual user SSO via SAML is configured for an IAM user. It can contain a maximum of 128 characters.

   2. Specify the access type.

      Table 2 Access types

      Access Type	Example	Description
      Programmatic access	Select it.	This type allows access to cloud services using development tools, such as APIs, CLI, and SDKs, and requires an access key or password.
      Management console access	Select it.	This type allows access to cloud services by using the management console and requires a password. If you select this parameter, Password must be selected for Credential Type.

      Figure 2 Specifying the access type
      
   3. Specify the credential type and login protection.
      Figure 3 Specifying the credential type and login protection
      

      Table 3 Specifying the credential type and login protection

      Credential Type and Login Protection		Example	Description
      Access key		Deselect it.	After you create the user, you can download the access key (AK/SK) generated for the user. Each user can have a maximum of two access keys.
      Password	Set now	A password set by the account	Set a password for the user and determine whether to require the user to reset the password at first login. If you will use the IAM user by yourself, you are advised to select this option, set a password, and deselect Require password reset at first login.
      	Automatically generated	An automatically generated password	The system automatically generates a login password for the user. After the user is created, download the EXCEL password file and provide the password for the user. The user can then use this password for login. This option is available only when you create a single user.
      	Set by user	A password set by the IAM user	A one-time login URL will be emailed to the user. The user can click on the link to log in to the console and set a password. If you do not use the IAM user, select this option and enter the email address and mobile number of the IAM user. The user can then set a password by clicking on the one-time login URL sent over email. The login URL is valid for seven days.
      Login Protection	Enable (Recommended)	-	If login protection is enabled, the user will need to enter a verification code in addition to the username and password during login. Enable this function for account security. You can choose from SMS-, email-, and virtual MFA–based login verification.
      	Disable	-	To enable login protection for an IAM user after creation, see Viewing or Modifying IAM User Information.

3. Click Next and add the user to the developer user group.
   Figure 4 Adding the user to the user group
   

4. Click Create. The created IAM user is displayed in the user list.
5. In the displayed Download Password dialog box, click OK to download the initial password of the IAM user. Then, provide the account name, IAM username, and the IAM user's initial password for corresponding employees.
   Figure 5 Downloading the password
   

Step 2: Log In to the Console as an IAM User

After an IAM user is created, employees can log in to Huawei Cloud as the IAM user. If an IAM user fails to log in, they can contact the administrator to reset their password.