Creating a User and Granting Permissions

This section describes how to use IAM to implement fine-grained permissions control for your enterprise switch resources. With IAM, you can:

• Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to enterprise switch resources.
• Grant only the permissions required for users to perform a specific task.
• Entrust an account or a cloud service to perform professional and efficient O&M on your enterprise switch resources.

If your account does not require individual IAM users, skip over this section.

IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see "Service Overview" in the Identity and Access Management User Guide.

Figure 1 shows the procedure for granting permissions.

Process Flow

Figure 1 Process for granting Enterprise Switch permissions

1. Create a user group and assign permissions.

   Create a user group on the IAM console, and assign the VPC ReadOnlyAccess policy to the group.

2. Create a user and add the user to the user group.

   Create a user on the IAM console and add the user to the group created in 1.

3. Log in and verify permissions.