Help Center/ Cloud Certificate Manager/ Private Certificate Authority (PCA) User Guide/ PCA Permissions Management/ Creating a User and Granting PCA Permissions to the User
Updated on 2024-06-25 GMT+08:00
View PDF

Creating a User and Granting PCA Permissions to the User

This topic describes how to use IAM to implement fine-grained permissions control for your PCA resources. With IAM, you can:

  • Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to PCA resources.
  • Grant only the permissions required for users to perform a task.
  • Entrust an account or cloud service to perform professional and efficient O&M to your PCACCM resources.

If your account does not require individual IAM users, skip this chapter.

This section provides some methods for you to assign permissions to a user. Figure 1 shows the process.

Prerequisites

Learn about the permissions (see Permissions Management) supported by PCA and choose policies or roles based on your requirements.

Process Flow

Figure 1 Process for granting PCA permissions
  1. Create a user group and assign permissions.

    Create a user group on the IAM console and grant the user group the PCA FullAccess.

  2. Create a user and add it to a user group.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify the permissions.

    Log in to the CCM console by using the created user, and verify that the user only has read permissions for CCM.

    Choose Cloud Certificate Management Service under Security in the Service List. If no message appears indicating that you have no permissions to access the service, the policy PCA FullAccess has already taken effect.