Project and Enterprise Project

Project

Projects in IAM are used to group and isolate resources (computing resources, storage resources, and network resources). Resources in your account must be mounted under projects. A project can be a department or a project team. Multiple projects can be created for one account.

Enterprise Project

Enterprise projects are used to categorize and manage resources. Resources in different regions can belong to one enterprise project. An enterprise can classify resources by department or project group and put relevant resources into one enterprise project for management. Resources can be migrated between enterprise projects.

Differences Between Projects and Enterprise Projects

• IAM project

  Projects are used to categorize and physically isolate resources in a region. Resources in an IAM project cannot be transferred. They can only be deleted and then rebuilt.

  

• Enterprise project

  Enterprise projects are upgraded based on IAM projects and used to categorize and manage resources of different projects of an enterprise. An enterprise project can contain resources of more than one region, and resources can be added to or removed from enterprise projects. If you have enabled enterprise management, you cannot create an IAM project and can only manage existing projects. In the future, IAM projects will be replaced by enterprise projects, which are more flexible.

  

Both projects and enterprise projects can be managed by one or more user groups. Users who manage enterprise projects belong to user groups. After a policy is granted to a user group, users in the group can obtain the rights defined in the policy in the project or enterprise project.

For details about how to create a project, create an enterprise project, and assign permissions, see Enterprise Management User Guide.