Help Center> CodeArts> User Guide> CodeArts Console> Console Permission Management> Creating a User and Granting CodeArts Permissions
Updated on 2023-12-04 GMT+08:00

Creating a User and Granting CodeArts Permissions

You can use Identity and Access Management (IAM) to implement fine-grained permissions control for your CodeArts console. With IAM, you can:

  • Use your account to create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials for accessing CodeArts resources.
  • Assign only the permissions required for users to perform a specific task.

If your account does not require individual IAM users, skip this section.

This section describes the procedure for granting permissions (see Figure 1).

Prerequisites

Learn about the permissions supported by CodeArts and choose permissions according to your requirements. For the permissions of other CodeArts services, see System Permissions.

Process

Figure 1 Process for granting CodeArts console permissions
  1. Create a user group and assign permissions.

    Create a user group on the IAM console, and attach the DevCloud Console ReadOnlyAccess policy to the group.

  2. Create an IAM user and add it to a group.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify permissions.

    Log in to the console as the created user and switch to the region for which the user is authorized to verify permissions.

    Choose CodeArts in Service List, and then choose Enterprise Account Authorization on the Overview page. If a message is displayed indicating that you have insufficient permissions to access the page, the DevCloud Console ReadOnlyAccess policy has already taken effect.