Help Center/ Cloud Trace Service/ User Guide/ Permissions Management
Updated on 2025-02-27 GMT+08:00

Permissions Management

You can use Identity and Access Management (IAM) for fine-grained permissions control for your CTS. With IAM, you can:

  • Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing CTS resources.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust other Huawei Cloud accounts or cloud services to perform efficient O&M on your CTS resources.

If your Huawei Cloud account does not require individual IAM users, you can skip this section.

Prerequisites

Before granting permissions to user groups, learn about system-defined permissions in System-defined roles and policies supported by CTS). To grant permissions for other services, learn about all system-defined permissions supported by IAM.

Process Flow

Figure 1 Process of granting CTS permissions
  1. On the IAM console, create a user group and grant it permissions.

    Create a user group on the IAM console, and attach the CTS Administrator policy to the group.

  2. Create an IAM user and add it to the created user group.

    Create a user on the IAM console and add it to the user group created in 1.

  3. Log in as the IAM user and verify permissions.

    Log in to the console as the user you created, and verify that the user has the assigned permissions.