Step 2: Create IAM Users and Log In

Creating IAM Users

1. Choose Users from the navigation pane, and click Create User.
2. Specify the user details and access type. To create more users, click Add User. A maximum of 10 users can be created at a time.
   

   • Users can log in to the cloud platform using the username, email address, or mobile number.
   • If users forget their password, they can reset it through email address or mobile number verification. If no email addresses or mobile numbers have been bound to users, users need to request the administrator to reset their passwords.

   Table 1 User information

   Parameter	Description
   Username	Username that will be used to log in to the cloud platform, for example, James and Alice. This field is required.
   Email Address	Email address of the IAM user that can be used as a login credential. IAM users can bind an email address after they are created. This field is required if you have selected Set by user for Credential Type.
   Mobile Number	Mobile phone number of the IAM user that can be used as a login credential. IAM users can bind a mobile number after they are created. This field is optional.
   Description	Additional information about the IAM user. This field is optional.

   • Programmatic access: Select this option to allow the user to access cloud services using development tools, such as APIs, CLI, and SDKs. You can generate an access key or set a password for the user.
   • Management console access: Select this option to allow the user to access cloud services using the management console. You can set or generate a password for the user or request the user to set a password at first login.
     

     • If the user accesses cloud services only by using the management console, select Management console access for Access Type and Password for Credential Type.
     • If the user accesses cloud services only through programmatic calls, select Programmatic access for Access Type and Access key for Credential Type
     • If the user needs to use a password as the credential for programmatic access to certain APIs, select Programmatic access for Access Type and Password for Credential Type
     • If the user needs to perform access key verification when using certain services in the console, such as creating a data migration job in the Cloud Data Migration (CDM) console, select Programmatic access and Management console access for Access Type and Access key and Password for Credential Type.

3. (Optional) Click Next to add the users to specific user groups.
   • The users will inherit the permissions assigned to the user groups.
   • You can also create new groups as required.
   

   The default user group admin has the administrator permissions and the permissions required to use all cloud resources. For the mapping relationships between company A's employees and the user groups, see Figure 1.

4. Click Create. If you have specified the access type as Programmatic access, you can download the access keys on the Finish page.
5. Repeat steps 1 through 4 to create users Charlie, Jackson, and Emily, and add them to the corresponding groups.

IAM User Login

After using the account of company A to create users James, Alice, Charlie, Jackson, and Emily, provide the account name, IAM user names, and IAM users' initial passwords to corresponding employees. Employees can use their own usernames and passwords to access the cloud platform.