Updated on 2024-03-28 GMT+08:00

Agency Management

If you use a member account to create a DRS task, your scheduled tasks may fail, including automatic startup, completion, resumable transfer, and comparison. To rectify the fault, you can use an agency to create a task.

For example, if you enable scheduled startup tasks, DRS will automatically entrust your account to DRS administrator op_svc_rds or to RDS during the task creation to implement automated management on the scheduled tasks.

Solution

  • Method 1: Use the master account to create a task again because the master account has the Security Administrator permission by default. After the task is created using the master account, an agency is created.
  • Method 2: Use the master account to add the Security Administrator permission to the user group to which the member account belongs, and create a task again. For details about how to add permissions, see Creating a User Group and Assigning Permissions.
  • Method 3: Manually add an agency. The procedure is as follows:
    1. Log in to Huawei Cloud using the master account and click Console in the upper right corner.
    2. On the management console, hover the mouse pointer over the username in the upper right corner, and choose Identity and Access Management from the drop-down list.
    3. In the navigation pane on the left, click Agencies.
    4. In the upper right corner, click +Create Agency.
    5. Enter DRS_AGENTCY in field Agency Name. If you select Account for Agency Type, enter op_svc_rds in field Delegated Account. If you select Cloud service for Agency Type, select MySQL for Delegated Account. Select Unlimited for Validity Period and then click Next.
      Figure 1 Creating an agency
    6. On the Select Policy/Role page, select Tenant Administrator and click Next.
      Figure 2 Select Policy
    7. Select the authorization for global services and then region-specific projects, and click OK.
      Figure 3 Authorization for global services
      Figure 4 Authorization for region-specific projects
    8. Click the agency name. On the Permissions tab, you can view permissions for global services and region-specific projects.
      Figure 5 Permissions
    9. The authorization takes effect after 15 to 30 minutes. After the authorization takes effect, create the task again.