Help Center/ Resource Formation Service/ User Guide/ IAM-based Permissions Management/ Creating a User and Granting Permissions to Use RFS Based on Roles and Policies
Updated on 2025-04-01 GMT+08:00
View PDF
Share

Creating a User and Granting Permissions to Use RFS Based on Roles and Policies

To manage permissions for RFS based on roles and policies, you can use IAM. With IAM, you can:

  • Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for using RFS.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust a Huawei Cloud account or cloud service to perform efficient O&M on your RFS resources.

If your Huawei Cloud account does not require individual IAM users, skip this section.

This section describes the procedure for granting permissions. Figure 1 shows the process flow.

Prerequisites

Learn about the permissions supported by RFS.

Process Flow

Figure 1 Process for granting RFS permissions
  1. Create a user group and assign permissions.

    Create a user group on the IAM console, and assign the RF FullAccess policy to the group.

  2. Create an IAM user and add it to the user group.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify permissions.

    Log in to the management console as the created user. Switch to the authorized region. Perform the following operations. If they can be successfully performed, the permissions are successfully granted.

    1. Choose Service List > Resource Formation Service. The RFS console is displayed.
    2. In the navigation pane on the left, choose Templates > My Templates. In the upper right corner of the displayed page, click Create Template.
    3. In the navigation pane on the left, choose Stacks. In the upper right corner of the displayed page, click Create Stack, and select the template created in the previous step for deployment.