Creating a User and Granting Permissions

Use IAMIAM to implement fine-grained permission control over your MapReduce Service (MRS). With IAM, you can:

Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing MRS resources.
Grant only the permissions required for users to perform a specific task.
Entrust a cloud account or cloud service to perform efficient O&M on your MRS resources.

If your cloud account does not require individual IAM users, skip this chapter.

This section describes the procedure for granting permissions (see Figure 1).

Learn about the permissions.

Figure 1 Process for granting MRS permissions

Create a user group and assign permissions to it.
Create a user group on the IAM console, and assign MRS permissions to the group.
Create a user and add it to a user group.
Create a user on the IAM console and add the user to the group created in 1. Create a user group and assign permissions to it.
Log in and verify permissions.
Log in to the console by using the user created, and verify that the user has the granted permissions.
- Choose Service List > MapReduce Service. Then click Create Cluster on the MRS console. If a message appears indicating that you have insufficient permissions to perform the operation, the MRS ReadOnlyAccess policy has already taken effect.
- Choose any other service in Service List. If a message appears indicating that you have insufficient permissions to access the service, the MRS ReadOnlyAccess policy has already taken effect.