Help Center/ CodeArts/ User Guide (Ally Region)/ User Guide/ CodeArts Console/ Console Permission Management/ Creating a User and Granting CodeArts Permissions
Updated on 2026-01-12 GMT+08:00
View PDF
Share

Creating a User and Granting CodeArts Permissions

You can use Identity and Access Management (IAM) to implement fine-grained permissions control for your CodeArts console. With IAM, you can:

  • Use your account to create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials for accessing CodeArts resources.
  • Assign only the permissions required for users to perform a specific task.

If your account does not require individual IAM users, skip this section.

This section describes the procedure for granting permissions (see Figure 1).

Prerequisites

Learn about the permissions supported by CodeArts and choose permissions according to your requirements.

Process

Figure 1 Process for granting CodeArts console permissions
  1. Create a user group and assign permissions.

    Create a user group on the IAM console, and attach the DevCloud Console ReadOnlyAccess policy to the group.

  2. Create an IAM user.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Logging In as a User and Verifying Permissions

    Log in to the CloudPond console with the credentials of the user created in the previous step and verify that the user can only view the resources.

    Choose CodeArts in Service List, and then choose Enterprise Account Authorization in the navigation pane. If a message is displayed indicating that you have insufficient permissions to access the page, the DevCloud Console ReadOnlyAccess policy has already taken effect.