Updated on 2023-07-14 GMT+08:00

How Do I Create an IAM Agency?

Scenarios

During cross-region image replication, an agency is required to verify cloud service permissions in the destination region. Therefore, you need to create a cloud service agency in advance.

Background

An agency is a trust relationship established between you and other HUAWEI CLOUD accounts or cloud services. If you have purchased multiple types of cloud resources on HUAWEI CLOUD, you can create an agency through IAM to establish a trust relationship with a professional company or cloud service for secure and efficient O&M on certain types of your resources.

Procedure

  1. Log in to the management console.
  2. In the upper right corner of the page, click the username and select Identity and Access Management.
  3. In the navigation pane, choose Agencies.
  4. Click Create Agency.
  5. On the Create Agency page, set the following parameters:
    • Agency Name: Enter an agency name, such as ims_admin_agency.
      Figure 1 Creating an agency
    • Agency Type: Select Cloud service.
    • Cloud Service: This parameter is available only if you select Cloud service for Agency Type. Select Image Management Service (IMS) from the drop-down list.
    • Validity Period: Select Unlimited.
    • Description: This parameter is optional. You can enter Agency with IMS Administrator privileges.
  6. Click Next.
    • Select Region-specific projects for Scope and select one or more projects from the drop-down list.

      In cross-region image replication, the agency must have the IMS Administrator permissions in the destination region. For example, if you want to replicate an image from CN-Hong Kong to CN East-Shanghai2, the agency must have the IMS Administrator permissions in CN East-Shanghai2.

      Do not select All projects. Otherwise, the created agency will be invalid.

    • Select IMS Administrator for Permissions.
    Figure 2 Granting permissions to an agency
  7. Click OK.
    Figure 3 New agency
    Figure 4 Permissions of the new agency

Accounts and Permissions FAQs

more