Creating a User and Assigning MetaStudio Permissions

Prerequisites

Before assigning permissions to user groups, you should learn about system-defined policies supported by MetaStudio and select the policies based on service requirements.

For details about the system-defined policies supported by MetaStudio, see MetaStudio Permissions. For the permissions of other services, see System-defined Permissions.

Process Flow

Figure 1 Process for assigning MetaStudio permissions

1. Create a user group and assign permissions.

   Create a user group on the IAM console, and assign the group the MetaStudio FullAccess permission (of MetaStudio administrator).

2. Create a user and add them to the user group.

   Create a user on the IAM console and add the user to the user group created in 1.

3. Log in and verify permissions.

   Log in to the console as the newly created user, and verify whether the user has the MetaStudio FullAccess permission.

   Choose MetaStudio from the service list. On the page displayed, click Create under Image modeling and create a virtual avatar by referring to Image Modeling. If the creation is successful, MetaStudio FullAccess has taken effect.

MetaStudio Custom Policies

You can create custom policies to supplement the system-defined policies of MetaStudio.

To create a custom policy on Huawei Cloudthe cloud service platform, choose either visual editor or JSON.

• Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy syntax.
• JSON: Create a JSON policy or edit an existing one.

For details, see Creating a Custom Policy. Examples of common MetaStudio custom policies:

• Example 1: Assigning all permissions for MetaStudio

  {
      "Version": "1.1",
      "Statement": [
          {
              "Action": [
                  "metastudio:*:*"
              ],
              "Effect": "Allow"
          }
      ]
  }

• Example 2: Assigning the read-only permission for MetaStudio

  {
      "Version": "1.1",
      "Statement": [
          {
              "Action": [
                  "metastudio:*:show*",
                  "metastudio:*:list*"
              ],
              "Effect": "Allow"
          }
      ]
  }