Help Center/ SoftWare Repository for Container/ User Guide (Enterprise Edition)/ IAM-based Permissions Management/ Creating a User and Granting Permissions
Updated on 2025-09-19 GMT+08:00
View PDF
Share

Creating a User and Granting Permissions

Scenarios

System-defined permissions in role/policy-based authorization provided by Identity and Access Management (IAM) let you control access to your SWR resources. With IAM, you can:

  • Create IAM users or user groups for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing SWR resources.
  • Grant users only the permissions required to perform a given task based on their job responsibilities.
  • Entrust other Huawei Cloud account or cloud service to perform efficient O&M on your SWR resources.

If your Huawei Cloud account does not require individual IAM users for permissions management, you can skip this section.

SWR system-defined policies are preset in IAM. If these policies cannot meet your requirements, you can create custom policies.

This section takes the SWR FullAccess policy as an example to describe how to grant permissions to an IAM user.

Prerequisites

Learn about the permissions (see SWR Enterprise Edition Permissions) supported by SWR Enterprise Edition and choose policies or roles as needed. For the system permissions of other services, see System Permissions.

Process

Figure 1 Process for granting SWR Enterprise Edition permissions
  1. Create a user group and assign permissions to it.

    Create a user group on the IAM console, and assign the SWR FullAccess policy to the group.

  2. Create an IAM user and add it to the user group.

    Create a user on the IAM console and add the user to the group created in 1.

    If an account is frozen (for example, due to arrears, violation, or before deregistration), you can only view and delete the account and cannot create or update the account. Unfreeze the account or complete real-name authentication in a timely manner.

  3. Log in and verify permissions.

    Log in to the SWR console as the created user, switch to the authorized region, and verify the permissions. Click Create Repository in the upper right corner of the page. If you can purchase a repository of the Enterprise edition, the permissions are set successfully.