Creating a User and Granting Permissions

Use IAM to implement fine-grained permissions control over your Direct Connect resources. With IAM, you can:

Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to VPCEP resources.
Grant only the permissions required for users to perform a task.
Entrust an account or cloud service to perform professional and efficient O&M on your VPCEP resources.

If your account does not require individual IAM users, skip over this section.

Figure 1 shows the procedure for granting permissions.

Learn about the permissions.

Figure 1 Process for granting VPCEP permissions

Create a user group and assign permissions.
Create a user group on the IAM console and assign the policy to the group.
Create a user and add the user to the user group.
Create a user on the IAM console and add the user to the group created in 1.
Log in to the management console as the created user.
Log in to the VPCEP console by using the newly created user, and verify that the user only has read permissions for VPCEP.
- Click Service List and choose VPC Endpoint. On the displayed page, click Buy VPC Endpoint in the upper right corner. If you can buy a VPC endpoint, the policy has already taken effect.
- Choose any other service in Service List. If a message appears indicating that you have insufficient permissions to access the service, the policy has already taken effect.