Adding Members from Another Account

Scenario

When enterprises A and B collaborate on a project, enterprise A can add IAM users in the account of enterprise B as members.

• There are two accounts: A and B. IAM user a of account A has created CodeArts project X and wants to invite IAM user b of account B to become a member of project X.
• The operations in this section will be performed on the CodeArts console and homepage.
  • CodeArts console: Account A authorizes account B. Account B then accepts the authorization.
  • CodeArts homepage: Account A goes to project X and adds an IAM user of account B.

Prerequisites

• Project X has been created in account A. User a has the member setting permission in this project.
• The authorized account (B) and authorizing account (A) must be from the same site.
• The account (B) of the invited user (b) has accepted the authorization from account A. For details, see Authorizing an Enterprise Account on the CodeArts Console and Accepting Authorization from Another Enterprise Account on the CodeArts Console.
• To authorize an account by using an agency ID, the account (B) to invite must have an agency whose delegated object is IAM Identity Center. If there is no such agency, perform the following steps to create one:
  1. Create a user
  2. Create a permission set
  3. Associate an account with users/groups and permission sets

Authorizing an Enterprise Account on the CodeArts Console

The following operations are performed by account A.

To authorize other enterprise accounts, you must have the Tenant Administrator role or the DevCloud Console FullAccess policy.

1. Log in to the CodeArts console, click , and select a region.
2. In the navigation pane, choose Enterprise Account Authorization.
3. Click the Granted Authorizations tab, and then click Authorize Enterprise Account.
4. Enter the ID of the target enterprise account, and click Authorize.
   

   The enterprise account ID can be obtained on the My Credentials page.

   1. Log in to the management console, hover over the username in the upper right corner, and choose My Credentials from the drop-down list.
   2. On the API Credentials page, obtain the value of Account ID.

5. Check the authorization record.
   • If the target account needs to manually accept the authorization, the record status becomes Pending.
   • When the authorization is accepted (either manually or automatically), the record status changes to Enabled. To delete the record, click Cancel Authorization.
   • If the invitation is rejected, the record status changes to Rejected. You can click Re-authorize to try again.

Accepting Authorization from Another Enterprise Account on the CodeArts Console

The following operations are performed by account B.

The invited account can automatically or manually accept the authorization on the CodeArts console.

Figure 1 Changing the authorization mode

To change the authorization mode and manually accept authorizations, you must have the Tenant Administrator role or the DevCloud Console FullAccess policy.

To manually accept an authorization, perform the following steps:

1. Log in to the CodeArts console, click , and select a region.
2. In the navigation pane, choose Enterprise Account Authorization.
3. Click the Received Authorizations tab. The received authorization is in the Pending state.
4. Accept or reject the authorization.
   • Accept: In the displayed dialog box, click OK. The status changes to Enabled. To delete the authorization, click Exit.
   • Reject: In the displayed dialog box, click OK. The status changes to Rejected.

Adding Users from Another Enterprise in a CodeArts Project

The following operations are performed by account A.

1. Go to the CodeArts homepage.
   1. Log in to the CodeArts console, click , and select a region.
   2. Click Access Service.

2. Click the target project name to access the project.
3. In the navigation pane, choose Settings > Members.
4. Click the Member View tab, and choose Add Members > From Another Account.
5. In the displayed dialog box, select the account of the users to invite, specify the invitation mode, enter the ID, and click Invite.
   • User ID: ID of a user to invite, which can be obtained from the My Credentials page. For details, see API Credentials.
   • Agency ID: ID of an agency created in the invited account. The ID can be obtained from the Agencies page in IAM.
     Figure 2 Obtaining an agency ID
     

6. Check the new members in the member list.