Why Can't an IAM User Log In to the VOD Console After Obtaining the VOD FullAccess Permission?

The authorization is refined by role and policy. Therefore, an IAM user needs to obtain the system role permission before logging in to the VOD console. If only the system policy permission is granted to the IAM user, the user cannot log in to the VOD console. If both the system role and system policy permissions are assigned to the IAM user, the system policy takes precedence over the system policy.

The VOD service supports the following system permissions:

• System policies: VOD FullAccess, VOD ReadOnlyAccess, and VOD CommonOperations.
• System roles: VOD Administrator, VOD Operator, VOD Guest, VOD Group Administrator, VOD Group Operator, and VOD Group Guest.

For details about the system permissions, see VOD System Permissions.