Viewing the RAM Permissions Library

Scenario

In the RAM permissions library, you can view details about all RAM permissions available for different resource types.

A RAM permission that defines the actions that principals with access to the resources in a resource share are allowed to perform on those resources. There is at least one RAM permission for each shareable resource type. Multiple permissions are defined for certain resource types. To ensure security, when you create a resource share, grant different permissions based on the principle of least privilege.

Procedure

1. Log in to the Huawei Cloud management console.
2. Click in the upper left corner and choose Management & Governance > Resource Access Manager. The Resource Access Manager page is displayed.
3. In the navigation pane, choose Permissions Library.
4. On the Permissions Library page, view the permission name/ID, resource type, and the number of resource shares.

   You can quickly search for permissions by permission name, ID, resource type, and number of resource shares in the search box.

5. Go back to the Permissions Library page, select the permission you want to view and click the number in the Resource Shares column. On the displayed Resource Shares page, you can view the resource shares that are associated with the permission.
   Figure 1 Viewing the permissions library
   
6. Select the permission you want to view and click the permission name to view its details, including basic information, actions, and associated resource shares.
   Figure 2 Viewing permission details