Adding an Instance to or Removing an Instance from a Security Group

Scenarios

When you create an instance, the system automatically adds the instance to a security group for protection.

If one security group cannot meet your requirements, you can add an instance to multiple security groups.
An instance must be added to at least one security group. If you want to change the security group for an instance, you can add the instance to a new security group and then remove the instance from the original security group.

You can add servers, extension NICs, and supplementary network interfaces to a security group by referring to the following operations:

Adding an Instance to a Security Group
Removing an Instance from a Security Group

Notes and Constraints

If you see a message saying you lack the required permissions when viewing a security group's resources on the management console, you need to request the permissions for viewing the security group and its associated resources, such as servers, extended network interfaces, and supplementary network interfaces. For details, see Example 4: Allowing users to view associated resources.

Adding an Instance to a Security Group

Log in to the management console.
Click in the upper left corner and select the desired region and project.
Click in the upper left corner and choose Networking > Virtual Private Cloud.
The Virtual Private Cloud page is displayed.
In the navigation pane on the left, choose Access Control > Security Groups.
The security group list is displayed.
In the security group list, locate the row that contains the security group and click Manage Instances in the Operation column.
The Associated Instances tab is displayed.
Click the required instance type tab.
The following operations use Servers as an example.

Figure 1 Associated Instances (Servers)
Click the Servers tab and click Add.
The Add Server dialog box is displayed.

Figure 2 Adding cloud servers
In the server list, select one or more servers and click OK to add them to the current security group.

Removing an Instance from a Security Group

An instance must be added to at least one security group. If you want to remove an instance from a security group, the instance must be associated with at least two security groups now.

Log in to the management console.
Click in the upper left corner and select the desired region and project.
Click in the upper left corner and choose Networking > Virtual Private Cloud.
The Virtual Private Cloud page is displayed.
In the navigation pane on the left, choose Access Control > Security Groups.
The security group list is displayed.
In the security group list, locate the row that contains the security group and click Manage Instances in the Operation column.
The Associated Instances tab is displayed.
Click the required instance type tab.
The following operations use Servers as an example.

Figure 3 Associated Instances (Servers)
Click the Servers tab, select one or more servers, and click Remove in the upper left corner of the server list.
A confirmation dialog box is displayed.

Figure 4 Removing cloud servers
Confirm the information and click OK.