Updated on 2022-12-29 GMT+08:00

Creating a User and Assigning DSC Permissions

This section describes IAM's fine-grained permissions management for your DSC resources. With IAM, you can:

  • Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to DSC resources.
  • Grant only the permissions required for users to perform a task.
  • Entrust a account or cloud service to perform professional and efficient O&M on your DSC resources.

If your account does not require individual IAM users, skip this section.

This section describes the procedure for granting permissions (see Figure 1).

Prerequisites

Learn about the permissions supported by DSC in Table 1 and choose policies or roles based on your requirements.

Table 1 DSC system-defined policies

Policy

Description

Type

Dependency

DSC DashboardReadOnlyAccess

Read-only permissions for the overview page of DSC

System-defined policy

None

DSC FullAccess

All permissions for DSC

System-defined policy

None

DSC ReadOnlyAccess

Read-only permissions for Data Security Center

System-defined policy

None

Process Flow

Figure 1 Process for granting permissions
  1. Create a user group and assign permissions.

    Create a user group on the IAM console, and assign the DSC FullAccess permissions to the group.

  2. Creating an IAM User.

    Create a user on the IAM console and add it to the group created in 1.

  3. Logging In as an IAM User and verify permissions.

    Log in to the DSC console using the created user and verify that the user has administrator permissions for DSC.

    Assume you are granted only the DSC FullAccess permission. Choose any other service in the Service List. If a message appears indicating insufficient permissions to access the service, the permission setting has already taken effect.