Creating a User and Granting KooMessage Permissions

This topic describes how to use Identity and Access Management (IAM) to implement fine-grained permissions control for your KooMessage resources. With IAM, you can:

• Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing KooMessage resources.
• Grant only the permissions required for users to perform a specific task.
• Entrust a Huawei Cloud account or cloud service to perform efficient O&M on your KooMessage resources.

If your Huawei Cloud account does not require individual IAM users, you may skip over this section.

Currently, Email messages support only the KooMessage FullAccess policy. Users with this policy have all permissions for Email messages.

Process Flow

Figure 1 Process of granting KooMessage permissions

1. On the IAM console, create a user group and grant it permissions.

   Create a user group on the IAM console, and grant the KooMessage FullAccess permissions to the group.

2. Create an IAM user and add it to the created user group.

   Create a user on the IAM console and add it to the user group created in 1.

3. Log in as the IAM user and verify permissions.

   Log in to the console as the created user and check whether all Email message functions are available. If yes, the policy has taken effect.