What Should I Do If I Want to Call an API But Have No Permissions to Do So as an IAM User? (Is It Edition-specific?)

Policy-based permission control is available in IoTDA since April 23, 2020. If an IAM user is not granted the permissions on IoTDA, the message "Operation not allowed. The user does not have the permission" will be displayed when you use the IAM user to access IoTDA resources. To assign permissions of the IoTDA FullAccess policy to the user group that the IAM user belongs to, do as follows:

Procedure:

1. Visit IAM and click Try Free to access the IAM console.
2. In the navigation pane, click User Groups. Click Manage Permissions in the row of the target user group.

   

3. Click Assign Permissions.
4. Set the scope.
   • Select Region-specific projects.
   • Select one or more projects from the drop-down list box based on the token level.
     

     

     If the token is domain-level, select all projects. If the token is project-level, select one or more specific projects.

5. In the upper right corner of the Permissions area, select System-defined policies, and select IoT Device Access (IoTDA) from the drop-down list or enter IoTDA in the search box.
6. Select IoTDA FullAccess and click OK in the lower right corner.