Creating a User and Granting SCM Permissions

This topic describes how to use IAM to implement fine-grained permissions control for your SCM resources. With IAM, you can:

Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to SCM resources.
Grant only the permissions required for users to perform a task.
Entrust a Huawei Cloud account or cloud service to perform professional and efficient O&M on your HSS resources.

If your Huawei Cloud account does not require individual IAM users, skip this chapter.

This topic describes the procedure for granting permissions (see Figure 1).

Learn about the permissions (see Permissions Management) supported by SCM and choose policies or roles based on your requirements.

Figure 1 Process for granting SCM permissions

Create a user group and assign permissions to it.
Create a user group on the IAM console and grant the user group the SCM Administrator permission for SCM.
Create an IAM user.
Create a user on the IAM console and add the user to the group created in 1.
Log in and verify permissions.
Log in to the CCM console by using the created user, and verify that the user only has read permissions for CCM.

Choose Cloud Certificate Management Service under Security in the Service List. If no message appears indicating that you have insufficient permissions to access the service, the SCM Administrator policy has already taken effect.