Notes and Constraints

IAM Identity Center obtains member account information from organizations defined in the Organizations service. Before using IAM Identity Center, you must enable the Organizations service and create an organization. Then, you can log in to IAM Identity Center using the organization's management account.
IAM Identity Center of the Huawei Cloud Chinese Mainland website cannot be used to manage accounts on the Huawei Cloud International website, and IAM Identity Center of the Huawei Cloud International website cannot be used to manage accounts on the Huawei Cloud Chinese Mainland website.

The following table describes quotas for IAM Identity Center. To increase the quota, see How Do I Increase My Quota?.

**Table 1** Quotas for IAM Identity Center
Item	Default Quota	Adjustable
Number of users that can be created in IAM Identity Center	100,000	Yes
Number of groups that can be created in IAM Identity Center	100,000	Yes
Number of users in a group	Unlimited	-
Number of groups to which a user can be added	1,000	No
Number of multi-factor authentication (MFA) devices that can be added to a user	2	No
Number of permission sets that can be created in IAM Identity Center	2,000	Yes
Number of policies in a permission set	20 (Custom policies are included. The default upper limit for identity policies is 10.)	Yes. You can change the upper limit for identity policies to 20.
Number of permission sets that can be associated with an account	50	Yes
Number of characters in a custom policy	6,144	No
Number of external identity providers (IdPs) that can be connected	1	No
Number of access control attributes that can be added	20	No