Permissions Management

Updated on 2024-05-17 GMT+08:00

View PDF

If you need to assign different permissions to employees in your enterprise to access your Global SIM Link (GSL) resources, IAM is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, helping you securely access your Huawei Cloud resources.

With IAM, you can use your Huawei Cloud account to create IAM users, and assign permissions to the users to control their access to specific resources.

If your Huawei Cloud account does not need individual IAM users for permissions management, then you may skip over this section.

IAM can be used for free. You pay only for the resources in your account. For details about IAM, see IAM Service Overview.

GSL Permissions

New IAM users do not have any permissions assigned by default. You need to first add them to one or more groups and attach policies or roles to these groups. In this way, the users can inherit permissions from the groups and perform operations on specific cloud resources.

NOTE:

Because of the cache, it takes about 10 to 15 minutes for the GSL system-defined policies to take effect after being granted to users and user groups.
Log out of the GSL console after granting the system-defined policies and then log in again.
After system-defined policies are granted, IAM users need to obtain a new token before calling GSL APIs.

Table 1 lists all the system-defined policies supported by GSL.