IAM Users, Project Members, and Repository Members

Constraints

As shown in the following figure, CodeArts Repo does not support the IAM custom permission policy whose Condition Key is g:RequestedRegion. Even if this parameter is configured, the policy will not take effect.

Figure 1 Configuring an IAM custom policy

Relationships Between IAM Users, Project Members, and Repository Members

Repository members come from members of the project to which the repository belongs. Project members mainly come from IAM users of tenants. In addition to the tenant to which the project creator belongs, IAM accounts of other tenants can be invited to join the project.

The following figure shows the relationships between IAM users, project members, and repository members.

By default, project roles are mapped to repository roles. You can change the repository role of a member in the repository as needed.

By default, the project creator is both the project administrator and repo administrator.