Authorizing SecMaster

Scenarios

SecMaster depends on some other cloud services. To better use SecMaster, you can authorize SecMaster to perform some operations on some cloud services on your behalf. For example, you can allow SecMaster to execute scheduling tasks and manage resources.

Your authorization is required first time you try to use SecMaster. The following table lists the permissions you need to assign to SecMaster.

Prerequisites

• The IAM account has been authorized. For details, see How Do I Grant Permissions to an IAM User?
• You have purchased SecMaster.

Authorizing SecMaster

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, choose Workspaces > Management.
   Figure 1 Workspaces > Management
   

4. (Optional) In the upper part of the workspace management page, click Entrusted Service Authorization - Current Tenant.

   The service authorization page is automatically displayed the first time you log in. For details about the authorized permissions, see Table 1. If you have already granted SecMasterBasicEntrustRegionPolicy when purchasing SecMaster, the permissions to be granted here will only include SecMasterBasicEntrustGlobalPolicy and Tenant Guest.

5. On the page for assigning permissions, select all required permissions (which are selected by default), select Agree to authorize, and click Confirm.

Authorization by Organization

SecMaster allows you to grant permissions to an organization in just a few clicks. After the permissions are granted, all users in the organization can use the SecMaster service.

• What is the Organizations service?

  The Organizations service helps you govern multiple accounts within your organization. It enables you to consolidate multiple accounts into a created organization so that you can centrally manage these accounts. You can use Organizations to apply access policies to different accounts in your organization. This helps you better meet the security and compliance requirements of your business. Before you start, make sure you understand Basic Concepts of Organizations.

• Main functions of the Organizations service

  The Organizations service provides the following functions:

  • Centralized management of enterprise accounts: An enterprise can invite multiple accounts to join an organization and group the accounts by level based on the management or working structure of the enterprise.
  • Centralized control of actions that each account can perform: The administrator of an organization can use service control policies (SCPs) to limit the permissions that can be assigned to an organization or the OUs in an organization. In the SCPs, you can limit which cloud services and APIs the member accounts in the organization can access.
  • Integration with other Huawei Cloud services: The Organizations service integrates with other Huawei Cloud services (trusted services) to enable users to perform organization-wide operations.

Prerequisites

An organization has been created, and an account has been invited to join the organization. For details, see Creating an Organization and Inviting an Account to Join Your Organization.

Constraints and Limitations

Only the organization administrator and delegated administrators can manage permissions by organization.

An organization administrator is an account used to create an organization. An organization has only one organization administrator.

For more information about delegated administrators, see Delegated Administrator.

Procedure

1. Log in to the SecMaster console.
2. In the navigation pane on the left, choose Workspaces > Management.
   Figure 2 Accessing the Workspaces page
   

3. On the workspace management page, click Service Authorization - Organization next to Management.
4. On the displayed Service Authorization - Organization pane, select the organizations to be authorized and select Agree to authorize.
5. Click Confirm.