Help Center/ Optimization Advisor/ Service Overview/
Updated on 2024-05-09 GMT+08:00
View PDF
Creating a User and Granting OA Permissions

Creating a User and Granting OA Permissions

This section describes how to use IAM to implement fine-grained permissions control for your cloud resources. With IAM, you can:

  • Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to OA resources.
  • Grant only the permissions required for users to perform a specific task.

If your Huawei Cloud account does not require individual IAM users, skip this chapter.

This section describes the procedure for granting permissions, as shown in Figure 1.

Prerequisites

Learn about the permissions supported by OA and choose policies or roles according to your requirements.

For details about the system policies supported by OA and the comparison between policies, see Permissions Management. For the system policies of other services, see System Permissions.

Permission Granting Process

Figure 1 Process of granting OA permissions to a user
  1. Create a user group on the IAM console, and assign the OA FullAccessPolicy, OA AdvancedOperationsPolicy, OA CommonOperationsPolicy, and OA ReadOnlyAccessPolicy permissions to the group. You are advised to assign the OA FullAccessPolicy permission to the group.
  2. Create an IAM user.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify permissions.

    Log in to the OA console as the created user, and verify that it only has the OA FullAccessPolicy permission.