Help Center/ Identity and Access Management/ Best Practices/ Cross-Region Permissions Assignment (Original Multi-Project Management)/ Procedure
Updated on 2024-11-07 GMT+08:00
View PDF
Share

Procedure

The following figure illustrates the process of enterprise project management for addressing company A's requirements.

Figure 1 Enterprise project management process

Step 1: Enable the Enterprise Management service and create enterprise projects on the Enterprise Management console.

Step 2: On the IAM console, create a user group for each functional team, create IAM users for employees, and add the users to different user groups.

Step 3: On the IAM console, assign the required permissions to each user group, and add the user group to the corresponding enterprise project. Users in the group automatically inherit its permissions.

Step 4: Purchase resources on other cloud service consoles and associate the resources with the corresponding enterprise projects.

Follow-Up Operation: Enterprise Project Management: Perform personnel, resource, and accounting management on the Enterprise Management console.

Enabling Enterprise Management and Creating Enterprise Projects

Perform the following procedure to create two enterprise projects (A and B) on the Enterprise Management console. If you have enabled Enterprise Project, go to 4.

  1. Log in to the Huawei Cloud console, hover over the account name in the upper right corner and choose Basic Information.
  2. On the Basic Information page, click Enable Enterprise Project Function.
  3. Read and agree to the Huawei Cloud Enterprise Management Agreement, and click Apply Now.
  4. On the Huawei Cloud management console, choose Enterprise > Project Management.

    Figure 2 Accessing the Enterprise Project Management page

  5. On the Enterprise Project Management Service page, click Create Enterprise Project.

    Figure 3 Creating an enterprise project

  6. Enter Enterprise_Project_A for Name and click OK.
  7. Repeat steps 5 to 6 to create Enterprise_Project_B.

    The two enterprise projects are displayed on the Enterprise Project Management Service page.

Creating IAM Users and User Groups

The following is an example procedure for creating a user group (Enterprise Project A_Accounting) and user (Murphy) and adding the user to the user group.

  1. Create a user group.

    1. Go to Huawei Cloud management console, and choose Service List > Management & Governance > Identity and Access Management.
    2. On the IAM console, choose User Groups in the navigation pane. Then click Create User Group.
      Figure 4 Creating a user group
    1. Set the user group name to Enterprise Project A_Accounting and click OK.
    2. Repeat steps 2 to 3 to create the accounting, development, security maintenance, and operations teams for the two enterprise projects.

    The user groups are displayed in the user group list.

  2. Create an IAM user and add the user to a user group.

    1. In the navigation pane of the IAM console, choose Users. Then click Create User.
    1. Specify the user details, select access types (see Figure 5), and click Next.
      Figure 5 Creating an IAM user
    1. Add user Murphy to the user group Enterprise Project A_Accounting and click Create.
    Figure 6 Adding the user to a user group
    1. Repeat steps 1 to 3 to create users for all employees and add the users to corresponding user groups.

    The user is displayed in the user list. You can view the IAM users of each user group on the Users tab page.

Associating User Groups with Enterprise Projects

Assign permissions to a user group and apply user group permissions to enterprise projects.

  1. Log in to the IAM console as an administrator.
  2. In the user group list, locate the row containing the target user group and click Authorize in the Operation column.
  3. On the displayed page, search for Enterprise Project BSS FullAccess in the search box, select it, and click Next.

    You can create custom policies to supplement system-defined policies for fine-grained permissions management. For details, see Creating a Custom Policy.

    Figure 7 Selecting permissions

  4. Select the Enterprise projects authorization scope.

    Figure 8 Selecting an enterprise project

  5. In the enterprise project list, select Enterprise Project A.
  6. Click OK.

Purchasing Resources and Associating Them with Enterprise Projects

The following is an example procedure for purchasing an ECS and associating it with enterprise project A.

  1. Log in to the Huawei Cloud management console, click in the upper left corner, and choose Compute > Elastic Cloud Server.
  2. Click Buy ECS in the upper right corner.

    Figure 9 Buying an ECS

  3. Specify the ECS details and select Enterprise_Project_A from the Enterprise Project drop-down list.

    Figure 10 Selecting an enterprise project

  4. Click Next in the lower right corner to view the resource details and submit the order.
  5. Repeat 1 to 4 to purchase required resources for the two enterprise projects.

    To view the purchased resources, go to the Enterprise Management console and click View Resource in the row that contains enterprise project A or B.

Follow-Up Operation: Enterprise Project Management

After completing the preceding steps, you can manage your enterprise projects on the Enterprise > Project Management > Enterprise Project Management Service page.

  • Resource management: Click View Resource to view the existing resources of an enterprise project and add more resources to the enterprise project.
  • Personnel management: Choose More > Permissions to go to the IAM console to view the users and user groups associated with an enterprise project, and modify the users, user groups and their permissions for the enterprise project. For details, see Personnel Management.
  • Accounting management: Click View Expenditures to view the orders and bills and manage renewals of an enterprise project. For details, see Enterprise Project Accounting Management.