Permissions

If you need to grant your enterprise personnel permission to access your CloudDC resources, use Identity and Access Management (IAM). IAM provides identity authentication, fine-grained permissions management, and access control. IAM helps you securely access your Huawei Cloud resources.

With IAM, you can create IAM users and grant them permission to access only specific resources.

If your Huawei Cloud account does not require individual IAM users for permissions management, you can skip this section.

IAM is a free service. You only pay for the resources in your account.

For more information about IAM, see IAM Service Overview.

CloudDC Permissions

New IAM users do not have any permissions assigned by default. You need to first add them to one or more groups and then attach policies or roles to these groups. The users then inherit permissions from the groups and can perform specified operations on cloud services based on the permissions they have been assigned.

CloudDC is a global service deployed for all regions. When you set the authorization scope to Global services, users have permission to access CloudDC resources in all regions.

You can grant permissions by using policies.

Policies: A fine-grained authorization strategy that defines permissions required to perform operations on specific cloud resources under certain conditions. This type of authorization is more flexible and is ideal for least privilege access.

Table 1 lists all the system-defined permissions for CloudDC.