Creating an IAM User and Granting Permissions

Prerequisites

Before assigning permissions to user groups, you should learn about system policies and select the policies based on service requirements. For details about system permissions supported by DLI, see DLI System Permissions.

Process Flow

Figure 1 Process for granting DLI permissions

1. Create a user group and grant permissions to it.

   Create a user group on the IAM console, and assign the DLI ReadOnlyAccess permission to the group.

2. Create an IAM user.

   Create a user on the IAM console and add the user to the group created in 1.

3. Log in and verify permissions.

   Log in to the management console using the newly created user, and verify the user permissions.

   • Choose Service List > Data Lake Insight. The DLI management console is displayed. If you can view the queue list on the Queue Management page but cannot buy DLI queues by clicking Buy Queue in the upper right corner (assume that the current permission contains only DLI ReadOnlyAccess), the DLI ReadOnlyAccess permission has taken effect.
   • Choose any other service in Service List. If a message appears indicating that you have insufficient permissions to access the service, the DLI ReadOnlyAccess permission has already taken effect.

More

• For how to create an IAM user, see Creating an IAM User.
• For how to create a custom policy, see Creating a Custom Policy.
• For how to modify a user policy, see Modifying or Deleting a Custom Policy.