Creating a User and Granting Permissions

If your account does not need individual IAM users, then you may skip over this section.

You can use IAM to perform fine-grained permission management for DDM resources.

With IAM, you can:

Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials for accessing DDM resources.
Grant users only the permissions required to perform a specific task.
Entrust an account or cloud service to perform professional and efficient O&M on your DDM resources.

This section describes the procedure for granting permissions.

Prerequisites

Before assigning permissions to a user group, you need to know the DDM permissions that can be added to the user group and select permissions as required.

For details about system permissions supported by DDM, see Permissions Management.

For system policies of other services, see System-defined Permissions.

Process Flow

Figure 1 Process for assigning DDM permissions

Create a user group on the IAM console, and assign the DDM ReadOnlyAccess permission to the group.
Create a user group and assign permissions to it.
Create a user on the IAM console and add the user to the group created in step 1.
Log in and verify permissions.
Log in to the DDM console using the created user, and verify that the user only has read permissions for DDM.
- Choose Service List > Distributed Database Middleware and click Buy DDM Instance to buy a DDM instance. If you cannot buy a DDM instance, the DDM ReadOnlyAccess permission has taken effect.
- Choose any other service in the Service List (for example, there is only the DDM ReadOnlyAccess policy). If a message appears indicating insufficient permissions to access the service, the DDM ReadOnlyAccess policy has already taken effect.