Help Center/ Log Tank Service/ More Documents/ User Guide (Kuala Lumpur Region)/ Permissions Management
Updated on 2023-11-29 GMT+08:00
View PDF
Share

Permissions Management

This chapter describes how to use for fine-grained permissions control for your LTS. With IAM, you can:

  • Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing LTS resources
  • Grant only the permissions required for users to perform a specific task.
  • Entrust or a cloud service to perform professional and efficient O&M on your LTS resources.

If your meets your permissions requirements, skip this section.

This section describes the procedure for granting user permissions. Figure 1 shows the process flow.

Prerequisites

Before granting permissions to user groups, learn about ) for LTS and select the permissions as required. For system permissions of other cloud services, see supported by IAM.

Process Flow

Figure 1 Process of granting permissions to a user
  1. Log in to the IAM console. Create a user group on the IAM console and grant the LTS FullAccess permission to the user group. For details, see .

    If you select the LTS FullAccess permissions, the Tenant Guest policy that the permission depends on is automatically selected. You also need to grant the Tenant Administrator policy for the global service project to the user group.

  2. Create a user on the IAM console and add the user to the user group created in 1. For details, see .
  3. Log in to the console by using the created user and verify permissions in the authorized region. For details, see and verify permissions.