Creating a User and Granting Permissions
This section describes IAM's fine-grained permissions management for your DEW resources. With IAM, you can:
- Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to HSS resources.
- Grant only the permissions required for users to perform a task.
- Entrust a HUAWEI CLOUD account or cloud service to perform professional and efficient O&M on your HSS resources.
If your HUAWEI CLOUD account does not require individual IAM users, skip this chapter.
This section describes the procedure for granting permissions (see Figure 1).
Prerequisites
Role/Policy Name |
Description |
Role/Policy Type |
Dependency |
---|---|---|---|
HSS Administrator |
HSS administrator, who has all permissions of HSS. |
System-defined role |
|
HSS FullAccess |
Full permissions for HSS |
System-defined policy |
To purchase HSS protection quotas, you must have the BSS Administrator role. BSS Administrator: a system role, which is the administrator of the billing center (BSS) and has all permissions for the service. |
HSS ReadOnlyAccess |
Read-only permissions for HSS |
System-defined policy |
None |
Process Flow
- Creating a User Group and Assigning Permissions.
Create a user group on the IAM console and grant the user group the HSS Administrator permission for HSS.
- Create an IAM user.
Create a user on the IAM console and add the user to the created group.
- Log in and verify permissions.
Log in to the HSS console by using the created user, and verify that the user only has read permissions for HSS.
In Service List on the HUAWEI CLOUD console, select any other services (for example, there is only the HSS Administrator policy). If a message indicating that the permission is insufficient is displayed, the HSS Administrator permission takes effect.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot