- What's new
- Function Overview
- Service Overview
- Getting Started
-
User Guide
- Introduction
- Permissions Management
- Basics of the Container Engine
-
Image Management
- Uploading an Image Through a Container Engine Client (Recommended)
- Obtaining a Long-Term Valid Login Command
- Uploading an Image Through SWR Console
- Pulling an Image
- Setting Image Attributes
- Sharing a Private Image
- Adding a Trigger
- Adding an Image Retention Policy
- Configuring Automatic Image Synchronization Between Regions
- Image Center
- Organization Management
- User Permissions
- Auditing
- Change History
- Best Practices
-
API Reference
- Before You Start
- Calling APIs
- API Overview
-
API
- Organization Management
- Managing Image Repositories
- Image Tag Management
- Shared Account Management
- API Version
- Organization Permission Management
- Image Permission Management
- Image Synchronization Management
- Trigger Management
- Image Retention Policy Management
- Temporary Login Command
- Quota Management
- Other
- Example Applications
- Appendixes
- SDK Reference
-
FAQs
- General FAQs
- Login Issues
- Synchronizing Images
- Pushing an Image
- Pulling an Image
-
Troubleshooting
- Why Does the Login Command Fail to Be Executed?
- Why Does an Image Fail to Be Pushed Through a Container Engine Client?
- Why Does an Image Fail to Be Uploaded Through SWR Console?
- Why Does the docker pull Command Fail to Be Executed?
- What Should I Do If Images Cannot Be Downloaded from Private Networks?
- What Do I Do If an Error Occurs When I Call an API?
-
Other FAQs
- Why Does a CCE Workload Cannot Pull an Image from SWR and a Message "Not Logged In" Is Displayed?
- How Many Tenants Can I Share an SWR Private Image With?
- Why Is an Image Pushed Using a Container Engine Client to SWR Different in Size From One Uploaded Through the SWR Console?
- Can I Pull Images on the SWR Console to a Local PC?
- Videos
- Glossary
-
More Documents
- User Guide
- API Reference
- User Guide (Paris Regions)
- API Reference (Paris Regions)
- User Guide (Kuala Lumpur Region)
- API Reference (Kuala Lumpur Region)
-
User Guide (Ankara Region)
- Service Overview
- Overview
- Permissions Management
- Basics of Docker
-
Image Management
- Pushing an Image Through a Container Engine Client
- Obtaining a Long-Term Valid Docker Login Command
- Obtaining a Long-Term Valid containerd Pull/Push Command
- Uploading an Image Through the SWR Console
- Pulling an Image
- Setting Image Attributes
- Sharing Private Images
- Adding a Trigger
- Adding an Image Retention Policy
- Organization Management
- User Permissions
- FAQs
-
API Reference (Ankara Region)
- Before You Start
- API Overview
- Calling APIs
- API
- Appendixes
- Permissions and Supported Actions
- General Reference
Copied.
User Permissions
Scenario
To manage SWR permissions, you can use Identity and Access Management (IAM). If you have the SWR Administrator or Tenant Administrator permission, you become an admin user of SWR accounts. You can grant permissions to other IAM users in SWR.
If you are not an SWR account admin user, you can request an SWR account admin user to grant you permissions to read, write, or manage a specific image or images in a specific organization.
- An SWR account admin user is granted image management permission of all organizations by default, even if the user is not in the authorized user list of the organizations.
Authorization Method
You can grant permissions to users in SWR by using either of the following methods:
- Grant permissions on an image details page to allow users to read, write, and manage a specific image.
- Grant permissions on an organization details page to allow users to read, write, and manage all the images in an organization.
Figure 1 User permissions
You can grant the following three types of permissions to users:
- Read: Users can only pull images.
- Write: Users can pull and push images, add triggers, and edit image attributes.
- Manage: Users can pull and push images, delete images or tags, edit image attributes, grant permissions, add triggers, and share images with other users.
To upload images to an organization, you require the write or manage permission for the organization to which images are uploaded. Write and manage permissions added on the image details pages will not be sufficient to upload images.
Granting Permissions for a Specific Image
To allow users to read, write, and manage a specific image, grant corresponding permissions to them on the details page of this image.
- Log in to the SWR console.
- In the navigation pane, choose My Images and click the desired image.
- On the image details page, click the Permissions tab.
- Click Add Permission. On the page displayed, click Read, Write, or Manage in the row of the desired username. Click OK to confirm.
Figure 2 Granting permissions for a specific image
Modifying or Deleting Permissions for a Specific Image
You can also modify or delete user permissions on the image details page.
- To modify permissions, click Modify in the row of the desired username on the Permissions tab page. Select a permission in the Permission drop-down list, and click Save in the Operation column.
- To delete permissions, click Delete in the row of the desired username on the Permissions tab page, enter DELETE in the dialog box displayed, and then click Yes.
Granting Permissions for an Organization
To allow users to read, write, and manage all the images in an organization, grant corresponding permissions to them on the details page of this organization.
Only users with the Manage permission can grant permissions for other users.
- Log in to the SWR console.
- In the navigation pane, choose Organization Management. Then click Details in the row of the desired organization.
- On the Users tab page, click Add Permission. In the dialog box displayed, select permissions for users and click OK.
Modifying or Deleting Permissions for an Organization
You can also modify and delete user permissions of an organization.
- To modify permissions, click Modify in the row of the desired username on the Users tab page. Select a permission in the Permission drop-down list, and click Save in the Operation column.
- To delete permissions, click Delete in the row of the desired username on the users tab page, enter DELETE in the dialog box displayed, and then click Yes.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot