Permission Management

Creating a User and Assigning Permissions

This chapter describes how to use Identity and Access Management (IAM) to implement fine-grained permissions control for your MCP resources. With IAM, you can:

• Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials for accessing MCP resources.
• Assign only the permissions required for users to perform a specific task.
• Entrust an account or cloud service to perform efficient O&M on your MCP resources.

If your Huawei Cloud account does not require individual IAM users, skip this chapter.

Figure 1 shows the procedure for assigning permissions by user group.

Prerequisites

• Before creating an IAM user to use MCP, authorize access for MCP in the current region using your Huawei Cloud account.
• Learn about permissions available to an IAM user to use MCP and choose permissions according to your requirements. For the permissions of other services, see System Permissions.

Process Flow

Figure 1 Process for assigning permissions to an IAM user

1. Create a user group and assign permissions.

   Create a user group on the IAM console, and assign the VPC Administrator and CCE Administrator permissions to the group.

2. Create a user and add the user to the user group.

   Create a user on the IAM console and add the user to the group created in 1.

3. Log in and verify permissions.

   Log in to the management console as the user you created, and verify that the user has the assigned permissions.

   • Choose Service List > Multi-Cloud Container Platform to enter the MCP console, and click Buy MCP. If you can buy MCP successfully, the permissions have taken effect.