Preparations

Signing up for a HUAWEI ID, Enabling Huawei Cloud Services, and Completing Real-Name Authentication

Perform the following operations to sign up for a HUAWEI ID, enable Huawei Cloud services, and complete real-name authentication. If you already have a HUAWEI ID, skip this part.

1. Visit Huawei Cloud and click Sign Up.
2. Sign up for a HUAWEI ID and enable Huawei Cloud services.
3. (Optional) Complete real-name authentication. Real-name authentication is the process of submitting valid identity information (such as a passport or business license) for verification when you use cloud services in the Chinese mainland. There are individual real-name authentication and enterprise real-name authentication.

   To comply with relevant laws and regulations and ensure account security and legal rights, real-name authentication is required for using cloud services in the Chinese mainland. Without real-name authentication, you are not allowed to purchase these cloud services. For more information, see Real-Name Authentication.

   To complete real-name authentication for an individual or enterprise account, refer to:

   • Individual account: Individual Real-Name Authentication
   • Enterprise account: Enterprise Real-Name Authentication

Creating an IAM User

You can use your account to create IAM users to ensure the security of accounts and resources. For more information about IAM users, see Creating an IAM User. This section describes how to create an IAM user with permissions to access MgC. If you do not need to use any IAM users, skip this part.

1. Visit Huawei Cloud. Click Console in the upper right corner. Sign in to the console using the HUAWEI ID you signed up for.
2. Hover your cursor over the username in the upper right corner, and choose Identity and Access Management from the drop-down list.
3. Create a user group and assign permissions to it.

   Create a user group. In the user group list, locate the user group created and click Authorize in the Operation column. On the Authorize User Group page, search for MgC in the search box. Select the permissions to be assigned to the user group.

   

   For details about all system-defined policies supported by MgC, see Table 1.

   Table 1 System-defined policies supported by MgC

   Policy Name	Description	Type
   MgC FullAccess	Administrator permissions for MgC. Users with these permissions can perform all operations on MgC.	System-defined policies
   MgC ReadOnlyAccess	Read-only permissions for MgC. Users with these permissions can only view MgC resources.	System-defined policies
   MgC DiscoveryAccess	Permissions for resource discovery with MgC. Users with these permissions can use the resource discovery function of MgC and view MgC resources.	System-defined policies
   MgC AssessAccess	Permissions for application assessment with MgC. Users with these permissions can use the resource discovery and application assessment functions of MgC and view MgC resources.	System-defined policies
   MgC MigrateAccess	Permissions for application migration with MgC. Users with these permissions can use the resource discovery, application assessment, and application migration functions of MgC and view MgC resources.	System-defined policies
   MgC AppDiscoveryAccess	Permissions for resource discovery with MgC. Users with these permissions can use the resource discovery and data collection functions of MgC and view MgC resources.	System-defined policies
   MgC MrrAccess	Permissions for service verification with MgC. Users with these permissions can use the service verification function of MgC and view MgC resources.	System-defined policies

   For the common operations supported by each system-defined policy of MgC, see Table 2.

   Table 2 Common operations supported by each MgC system-defined policy

   Operation	MgC FullAccess	MgC ReadOnlyAccess	MgC DiscoveryAccess	MgC AssessAccesss	MgC MigrateAccess	MgC AppDiscoveryAccess
   Performing operations on MgC resources	√	x	x	x	x	x
   Viewing MgC resources	√	√	√	√	√	√
   Discovering resources using MgC	√	x	√	√	√	√
   Designing migration plans on MgC	√	x	x	√	√	x
   Performing operations on migration workflows	√	x	x	x	√	x
   Collecting resource details using MgC	√	x	x	x	x	√

4. Create an IAM user and add it to the user group.

   Create a user and add it to the user group authorized with MgC permissions in Step 3.

Obtaining an Access Key (AK/SK Pair)

Access keys are identity credentials used to call APIs and perform authentication. Account administrators and IAM users can only use their own access keys for these actions, ensuring secure and controlled access. For details about how to obtain an access key, see Access Keys.