Permissions Management

If you need to assign different permissions to employees in your enterprise to access your service tickets, IAM is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, securing access to your Huawei Cloud resources.

With IAM, you can use your Huawei Cloud account to create IAM users for your employees, and grant permissions to the users to control their access to specific resource types. For example, you can create IAM users for some employees and assign specific permissions to allow them to process service tickets in the same group but disallow them to create service tickets.

If your Huawei Cloud account does not need individual IAM users for permissions management, you may skip this section.

IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see the IAM Service Overview.

Service Tickets Permissions

By default, new IAM users do not have permissions assigned. To assign permissions to a new user, you need add it to one or more groups, and attach permission policies or roles to these groups. The user then inherits the permissions from these groups and can perform specified operations on cloud services.

Service Tickets is a global service and can be accessed without specifying a physical region. Service Tickets permissions are assigned in the Global project, and you do not need to switch regions when accessing Service Tickets.

Table 1 lists all the system-defined roles supported by Service Tickets.

**Table 1** System-defined roles supported by Service Tickets
Role	Description	Type
Ticket Administrator (Global)	Administrator permissions for Service Tickets	System-defined role
Ticket Group Operator (Global)	Permissions for processing service tickets of other users in the same group	System-defined role

The following table lists the common operations supported by each system-defined role of Service Tickets.

**Table 2** Common operations supported by each system-defined role
Operation	Ticket Administrator (Global)	Ticket Group Operator (Global)
Creating a service ticket	√	x
Viewing a service ticket	√	√
Adding a ticket reminder	√	√
Canceling a service ticket	√	√
Deleting a service ticket	√	√
Confirming a service ticket	√	√
Processing service tickets of other users in the same group	x	√