Creating a User and Granting Permissions

This section describes the fine-grained permissions management provided by Identity and Access Management (IAM) for your APM. With IAM, you can:

• Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to APM resources.
• Grant only the permissions required for users to perform a task.
• Entrust a cloud account or service to perform professional and efficient O&M on your APM resources.

If your account does not need individual IAM users, then you may skip over this chapter.

This section describes the procedure for granting permissions (see Figure 1).

Process

Figure 1 Granting APM permissions

1. Create a user group and assign permissions to it.

   Create a user group on the IAM console, and assign the APM ReadOnlyAccess policy to the group.

2. Create a user and add it to a user group.

   Create a user on the IAM console and add the user to the group created in 1.

3. Logging In Using an IAM User and Verifying Permissions

   Log in to the APM console as the created user, and verify that it has only the read permissions for APM.