Creating a User and Granting Permissions
This chapter describes IAM's fine-grained permissions management for your CGS. With IAM, you can:
- Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to CGS resources.
- Grant only the permissions required for users to perform a task.
- Entrust a HUAWEI CLOUD account or cloud service to perform professional and efficient O&M on your CGS resources.
If your Huawei Cloud account does not need individual IAM users for permissions management, then you may skip over this chapter.
This section describes how to authorize users.
Prerequisites
Learn about the permissions (see Table 1) supported by CGS and choose policies or roles according to your requirements.
Role/Policy Name |
Description |
Type |
Dependencies |
---|---|---|---|
CGS Administrator |
CGS system administrator, who has all permissions of CGS. |
System role |
Dependent on the Tenant Guest policy, which needs to be assigned in the same project as the CGS Administrator policy |
CGS FullAccess |
All permissions of CGS |
System-defined policy |
None |
CGS ReadOnlyAccess |
Read-only permissions for CGS |
System-defined policy |
None |
Authorization Process
- Create a user group and assign permissions.
Create a user group on the IAM console and grant the user group the CGS ReadOnlyAccess permission for CGS.
- Create an IAM user.
Create a user on the IAM console and add the user to the user group created in 1.
- Log in and verify permissions.
Log in to the CGS console by using the newly created user, and verify that the user only has read permissions for CGS.
Verification method: Assume you are granted only the CGS ReadOnlyAccess permission. Click Service List and choose Container Guard Service. On the CGS console, click Buy CGS and try purchasing CGS quota. If the purchase fails, the permission setting has already taken effect.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot