Help Center/ Anti-DDoS Service/ User Guide/ CNAD Basic (Anti-DDoS) User Guide/ Using IAM to Grant Anti-DDoS Permissions/ Creating a User Group and Assigning the Anti-DDoS Access Permission
Updated on 2024-12-24 GMT+08:00
View PDF
Share

Creating a User Group and Assigning the Anti-DDoS Access Permission

If you want to implement refined permission management for your Anti-DDoS service,you can use Identity and Access Management (IAM). With IAM, you can:

  • Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to Anti-DDoS resources.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust another Huawei Cloud account or cloud service to perform professional and efficient O&M to your Anti-DDoS resources.

If your Huawei Cloud account does not need individual IAM users for permissions management, skip this chapter.

This section describes the procedure for granting permissions (see Figure 1).

Prerequisites

Before assigning permissions to a user group, you should learn about the Anti-DDoS permissions that can be added to the user group, and select the permissions based on the site requirements. For details about the permissions, see Anti-DDoS Permissions. For the system policies of other services, see Permissions Policies.

Process

Figure 1 Process for granting permissions
  1. Create a user group and assign permissions.

    Create a user group on the IAM console, and assign the Anti-DDoS Administrator policy to the group.

  1. Create a user and add it to a user group.

    Create a user on the IAM console,and add the user to the group created in 1.

  1. Log in and verify permissions.

    Log in to the management console using the user created, and verify that the user only has read permissions for AAD.

    In Service List on the management console, select any other services. If a message indicating that the permission is insufficient is displayed, the Anti-DDoS Administrator permission takes effect.

Parent Topic: Using IAM to Grant Anti-DDoS Permissions