Project and Enterprise Project

Project

IAM projects are used to group and isolate resources (computing resources, storage resources, and network resources). A project can be a department or a project group. All your resources are managed by project. Multiple projects can be created for one account.

Enterprise Project

Enterprise projects are used to categorize and manage resources. Resources in different regions can belong to one enterprise project. An enterprise can classify resources by department or project group and put relevant resources into one enterprise project for easy management. Resources can be migrated between enterprise projects.

Differences Between Projects and Enterprise Projects

• IAM project

  Projects are used to categorize and physically isolate resources in a region. Resources cannot be transferred between IAM projects. They can only be deleted and then provisioned again.

  

• Enterprise project

  Enterprise projects are upgraded based on IAM projects and used to categorize and manage resources of different projects of an enterprise. An enterprise project can contain resources in more than one region, and resources can be transferred between enterprise projects. If you have enabled enterprise management, you cannot create an IAM project and can only manage existing projects. In the future, IAM projects will be replaced by enterprise projects, which are more flexible.

  

Both projects and enterprise projects can be managed by one or more user groups. Users who manage enterprise projects belong to user groups. After a policy is granted to a user group, users in the group can obtain the permissions defined in the policy in the project or enterprise project.

For details about how to create a project and an enterprise project, and assign permissions, see Enterprise Management User Guide.