Associating Accounts with Users/Groups and Permission Sets

After IAM Identity Center users/groups and permission sets are created, you can associate one or more member accounts in your organization with the created users/groups and permission sets. This way, the IAM Identity Center users can access resources under the associated accounts after logging in to the system, and permissions included in the associated permission set can be granted to the resources.

Currently, you can only associate IAM Identity Center users/groups and permission sets with member accounts in your organization, rather than organizational units (OUs) or the whole organization.

The accounts can be either the management account or member accounts of your organization. You can manage them on the Organizations console.

Procedure

Log in to the Huawei Cloud console.
Click in the upper left corner of the page and choose Management & Governance > IAM Identity Center.
In the navigation pane on the left, choose Multi-Account Permissions > Accounts.

By default, accounts are displayed in an organizational hierarchy structure. You can click to switch to the list view.

Figure 1 Account view
Select one or more accounts from the account list and click Assign User/Group in the upper left corner.

Alternatively, locate a target account and click Assign User/Group in the Operation column.

Figure 2 Selecting accounts
In the Select User/Group step on the displayed page, select one or more users/groups and click Next.

Figure 3 Selecting one or more users/groups
In the Select Permission Set step, select one or more permission sets and click Next.

Figure 4 Selecting one or more permission sets
In the Confirm step, confirm the configurations and click OK.

Figure 5 Confirming configurations