Creating an IAM User and Granting Permissions

Prerequisites

Before assigning permissions to user groups, you should learn about available Workspace system-defined permissions for user groups and select the permissions based on service requirements. For details about the system-defined permissions supported by Workspace, see Workspace System-defined Policies. For the permissions of other services, see System-defined Permissions.

Example Process

Figure 1 Assigning permissions on Workspace resources to a user

1. Create a user group and assign permissions to it.

   Create a user group on the IAM console, assign the Workspace Administrator permission to the group, and select the authorization scope.

2. Create a user and add them to the user group.

   Create a user on the IAM console and add the user to the group created in 1.

3. Log in as the created user and verify permissions.

   Log in to the Workspace console as the newly created user, and verify whether it has the administrator permissions.

   Click , choose Service List > Workspace, and click Buy Desktop in the upper right corner. If no message appears indicating insufficient permissions, the Workspace Administrator permission has already taken effect.