Creating an Agency

To use some OBS features, you need to use IAM agencies to grant required permissions to OBS for processing your data.

In the Logging dialog box, click Create Agency to jump to the Agencies page on the Identity and Access Management console.
Click Create Agency.
Enter an agency name.
Select Cloud service for the Agency Type.
Select Object Storage Service (OBS) for Cloud Service.
Set a validity period.
Click Next.
On the Select Policy/Role page, select a custom policy that has the permission to upload data to the log storage bucket and click Next.
If no custom policy is available, create one by choosing Permissions > Policies/Roles in the navigation pane

Select JSON for Policy View. The policy content is as follows.

When coding the policy content in an actual scenario, replace mybucketlogs with the actual bucket name:
```
{
    "Version": "1.1",
    "Statement": [
        {
            "Action": [
                "obs:object:PutObject"
            ],
            "Resource": [
                "OBS:*:*:object:mybucketlogs/*"
            ],
            "Effect": "Allow"
        }
    ]
}
```
On the Select Scope page, select Global services for Scope and click OK.

Go to the Agencies page on the Identity and Access Management console.
Click Create Agency.
Enter an agency name.
Select Cloud service for the Agency Type.
Select Object Storage Service (OBS) as the cloud service.
Set a validity period.
In the Permissions area, find Global service > OBS and click Attach Policy on the right.
Select the custom policy with OBS administrator permissions (all operation permissions on OBS) and click OK.
1. If no custom policy is available, create one by choosing Permissions > Policies/Roles in the navigation pane
  When creating a custom policy, select Global services for Scope and select JSON for Policy View. The policy content is as follows.
```
{
    "Version": "1.1",
    "Statement": [
        {
            "Action": [
                "obs:*:*"
            ],
            "Effect": "Allow"
        }
    ]
}
```
Select the scope where the permission applies to. In the permission area, search for and select OBS Administrator.
Click OK to complete the agency creation.