Creating a User and Granting Permissions

This chapter describes how to use Identity and Access Management (IAM) for fine-grained permissions control for your Application Operations Management (AOM) resources. With IAM, you can:

Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing AOM resources.
Grant only the permissions required for users to perform a task.
Entrust an account or a cloud service to perform efficient O&M on your AOM resources.

If your account meets your permissions requirements, you can skip this section.

This section describes the procedure for granting permissions (see Figure 1).

Prerequisites

Learn about the permissions (see section "Permissions Management" in AOM Service Overview) supported by AOM and choose policies or roles according to your requirements. For the permissions of other services, see section "Permission Description" in the help center.

Process

Figure 1 Process for granting AOM permissions

Create a user group and assign permissions.
Create a user group on the IAM console, and assign the AOM ReadOnlyAccess policy to the group.
Create an IAM user.
Create a user on the IAM console and add the user to the group created in 1.
Log in and verify permissions.
Log in to the AOM console as the created user, and verify that it only has read permissions for AOM.