Help Center/ Object Storage Service/ User Guide (Paris Region) / OBS Console Operation Guide/ Related Operations/ Creating an IAM Agency
Updated on 2024-03-04 GMT+08:00
View PDF
Share

Creating an IAM Agency

To use some OBS features, you need to use IAM agencies to grant required permissions to OBS for processing your data.

Creating an Agency for Cross-Region Replication

  1. In the Create Cross-Region Replication Rule dialog box on OBS Console, click Create IAM agencies to jump to the Agencies page on the IAM console.
  2. Click Create Agency.
  3. Enter an agency name.
  4. Select Cloud service for the Agency Type.
  5. Select Object Storage Service (OBS) for Cloud Service.
  6. Set a validity period.
  7. In the Permissions area, choose Global service > OBS, and click Attach Policy in the Operation column. The Attach Policy window is displayed.
  8. Choose Base > Tenant Administrator, and click OK.
  9. (Optional) If Replicate KMS encrypted objects is selected when configuring the cross-region replication rule, the KMS Administrator policy set must be configured in the regions where the source bucket and destination bucket are located.

    1. Click Modify in the row of the region where the source/destination bucket resides. The Attach Policy dialog box is displayed.
    2. Search for KMS and check the box next to the KMS Administrator policy set.
    3. Click OK.

  10. Click OK to complete the agency creation.
Parent topic: Related Operations