Help Center> Conversational Bot Service> User Guide> IAM Permissions Management> Creating a User and Granting CBS Permissions
Updated on 2023-06-06 GMT+08:00
View PDF

Creating a User and Granting CBS Permissions

This section describes how to use IAM to implement fine-grained permissions control for your Conversational Bot Service (CBS) resources. With IAM, you can:

  • Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing CBS resources.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust a HUAWEI CLOUD account or cloud service to perform efficient O&M on your CBS resources.

If your HUAWEI CLOUD account does not require individual IAM users, skip this section.

Prerequisites

Learn about the permissions (see Permissions Management supported by CBS and choose policies or roles suited to your requirements. For permissions of other services, see System Permissions.

Process Flow

Figure 1 Process for granting CBS permissions
  1. Create a user group and assign permissions to it.

    Create a user group on the IAM console, and attach the CBS Operator policy to the group.

  2. Create a user and add it to a user group.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in as the user and verify permissions.

    Log in to the CBS console with the user created in 2, and verify that the user only has read permissions for CBS.

    • Choose Service List > Conversational Bot Service. Then click Buy Q&A Bot on the CBS console. If a message appears indicating insufficient permissions to perform the operation (for example, there is only the CBS Viewer policy), the CBS Viewer policy has already taken effect.
    • Choose any other service in the Service List (for example, there is only the CBS Viewer policy). If a message appears indicating insufficient permissions to access the service, the CBS Viewer policy has already taken effect.