Identity Authentication and Access Control

You can access CBR through the CBR console, APIs, or SDKs. No matter which method you choose, you actually use REST APIs.

These APIs require authentication, so you must first obtain the necessary credentials from Huawei Cloud Identity and Access Management (IAM) before using CBR. For details about IAM authentication, see Authentication.

Access Control

You can use IAM to control access to your CBR resources.

**Table 1** CBR access control
Method		Description	Reference
Permissions management	IAM permissions	IAM permissions define which actions are allowed or denied on your cloud resources. After creating an IAM user, the administrator needs to add it to a user group and grant the permissions required by CBR to the user group. Then, all users in this group automatically inherit those permissions.	Permissions management