Delegating CPH to Operate OBS Buckets

The administrator can create custom policies on IAM, assign custom policies to OBS buckets for refined access control, and delegate the policies to CPH to back up and restore cloud phone data and install applications.

1. Log in to the management console.
2. On the Service List page, choose Management & Governance > Identity and Access Management.
3. On the IAM console, choose Permissions > Policies/Roles from the navigation pane, and click Create Custom Policy in the upper right corner.

   

4. Enter a policy name.

   Select Visual editor for Policy View.

   

5. Set the policy content.
   1. Select Allow.
   2. Click Select service and select Object Storage Service (OBS).

      

   3. For Actions, select actions as required. For details about the actions, see Object-Related Actions.

      To delegate CPH to perform operations on OBS buckets, at least the following four actions must be selected:

      obs:object:GetObject

      obs:object:PutObject

      obs:object:PutObjectVersionAcl

      obs:object:PutObjectAcl

      

      

   4. Select All for Resources. For details about how to select specific resources, see descriptions of specific resources in Creating a Custom Policy.

      

6. Click OK.

• Create an agency.

1. Log in to the IAM console.

   In the navigation pane on the left, choose Agencies and click Create Agency in the upper right corner.

   

2. Configure parameters shown in the following figure and click Next.

   

   

   The agency name must be cph_obs_agency.

3. Select the custom policy created in Create a custom policy and click Next.

   

4. Select Global services and click OK.