How Do I Grant Permissions to an IAM User?

Procedure

1. Log in to the console as the administrator.
2. Click in the upper left corner of the page and choose Management & Governance > Identity and Access Management.
3. Create a user group.
   1. In the navigation pane on the left, choose User Groups. On the displayed page, click Create User Group in the upper right corner.
   2. On the Create User Group page, specify user group name and description.
      • Name: Set this parameter to SecMaster_ops.
      • Description: Enter a description.
   3. Click OK.

4. Create a custom policy.
   1. In the navigation pane on the left, choose Permissions > Policies/Roles. In the upper right corner of the displayed page, click Create Custom Policy.
   2. Configure a policy.
      1. Policy Name: Set this parameter to SecMaster_FullAccess.
      2. Policy View: Select JSON.
      3. Policy Content: Copy the following content and paste it in the text box.

         {
             "Version": "1.1",
             "Statement": [
                 {
                     "Action": [
                         "secmaster:*:*"
                     ],
                     "Effect": "Allow"
                 }
             ]
         }

      1. Click OK.
      2. In the dialog box displayed, set the policy scope to Global services.
      3. Click OK.
      Figure 1 Creating a policy
      

5. Assign permissions to the created user group.
   1. In the navigation pane on the left, choose User Groups. On the displayed page, click SecMaster_ops.
   2. On the Permissions tab page, click Authorize.
      Figure 2 Roles
      
   3. On the Select Policy/Role page, search for and select the SecMaster_FullAccess policy, and click Next.
   4. Set the minimum authorization scope. Select All resources for Scope. After the setting is complete, click OK.

6. Verify the authorization. The policy will be listed on the page.
   Figure 3 Authorized