Help Center/ Cloud Service Engine/ User Guide/ Exclusive ServiceComb Engine/ Using ServiceComb Engines/ System Management/ Accounts
Updated on 2024-10-15 GMT+08:00
View PDF
Share

Accounts

You can use an account associated with the admin role to log in to the ServiceComb engine console and create an account or manage a specified account created in the engine based on service requirements.

Table 1 Account management operations

Operation

Description

Adding an Account

Creates an account and associates a proper role with the account. Users who use the account have the access and operation permissions on the ServiceComb engine.

You can create up to 1000 accounts, including new accounts and imported IAM account.

Importing an IAM Account

Imports an IAM account and associates roles with it. Users using this IAM account have the access and operation permissions on the microservice engine.

If the imported IAM account needs to connect microservice applications to the engine through programming interface authentication, reset its password and then use the new password to configure security authentication parameters.

When you use this IAM account to log in to the CSE console with security authentication enabled, you do not need to enter the account and password. However, a password is still required after the VDC read-only user is imported.

CSE can manage up to 1000 accounts, including new accounts and imported IAM account.

NOTE:

The IAM account can be imported only to ServiceComb engine 2.5.0 or later with security authentication enabled.

Viewing Role Permissions

Displays the permissions of the role associated with a specified account.

Editing an Account

Adds or deletes roles for an account. The root account cannot be edited.

Changing the Password

Changes the password of an account that has logged in to the ServiceComb engine based on service requirements or security regulations.

NOTICE:
  • If the account and password are used to register a microservice in the SDK, changing the account and password may affect the service running of the microservice (the microservice cannot be registered with the ServiceComb engine). As a result, the service system will be damaged. Exercise caution when performing this operation.
  • After the password is changed, update the microservice authentication configuration in a timely manner.
  • After the password is changed, the account may be locked due to three consecutive incorrect password attempts. The account will be unlocked after 15 minutes.

Resetting a Password

Based on service requirements or security regulations, you can use the account that has logged in to the ServiceComb engine to reset the passwords of other accounts under the ServiceComb engine.

NOTICE:
  • If the account and password are used to register a microservice in the SDK, resetting the account and password may affect the service running of the microservice (the microservice cannot be registered with the ServiceComb engine). As a result, the service system will be damaged. Exercise caution when performing this operation.
  • After the password is reset, update the microservice authentication configuration in a timely manner.
  • After the password is reset, the account may be locked due to three consecutive incorrect password attempts. The account will be unlocked after 15 minutes.

Deleting an Account

Deletes an account that is no longer used. The root account cannot be deleted.

NOTICE:

If the account and password are used to register a service in the SDK, deleting the account will affect the service running (the account cannot be registered with the engine) and damage the service system. Exercise caution when performing this operation.

Adding an Account

Before adding an account, you can create a role based on service requirements. For details, see Creating a Role.

  1. Log in to CSE.
  2. Choose Exclusive ServiceComb Engines.
  1. Click the target ServiceComb engine with security authentication enabled.
  2. Choose System Management.
  3. In the displayed Security Authentication dialog box, enter the name and password of the account associated with the admin role under the ServiceComb engine, and click OK.

    If you connect to the ServiceComb engine for the first time, enter the account name root and the password entered when Creating a ServiceComb Engine.

  4. Choose Accounts > Create Account and configure account parameters by referring to the following table:

    Parameter

    Description

    Account

    Enter an account name.

    NOTE:

    The account name cannot be changed once the account is created.

    Role

    Select a role based on service requirements.

    NOTE:

    An account can be associated with up to five roles.

    Password

    Enter the password.

    Confirm Password

    Enter the password again.

  5. Click OK.

Importing an IAM Account

Before importing an IAM account, you can create a role based on service requirements. For details, see Creating a Role.

  1. Log in to CSE.
  2. Click the target ServiceComb engine with security authentication enabled.
  3. Choose System Management. In the displayed Security Authentication dialog box, enter the name and password of the account associated with the admin role under the ServiceComb engine, and click OK.

  4. Choose Accounts > Import IAM User Name.
  5. Select the IAM account to be imported and select account roles.

    An account can be associated with up to five roles.

  6. Click Confirm.

    You cannot use the passwords of the imported IAM user names to log in to the system. Resetting a Password first if you want to use the imported IAM user names to connect microservice applications to the engine through programming interface security authentication.

Viewing Role Permissions

  1. Log in to CSE.
  2. Choose Exclusive ServiceComb Engines.
  1. Click the target ServiceComb engine with security authentication enabled.
  1. Choose System Management.
  2. In the displayed Security Authentication dialog box, enter the name and password of the account associated with the admin role under the ServiceComb engine, and click OK.

  3. Click the role in the Role column of the account to be viewed in the account list. On the displayed page, view the role and permission configuration associated with the account.

Editing an Account

  1. Log in to CSE.
  2. Choose Exclusive ServiceComb Engines.
  1. Click the target ServiceComb engine with security authentication enabled.
  1. Choose System Management.
  2. In the displayed Security Authentication dialog box, enter the name and password of the account associated with the admin role under the ServiceComb engine, and click OK.

  3. On the Accounts tab page, click Edit Account in the Operation column of the account to be edited.
  4. Select a role based on service requirements.

    An account can be associated with up to five roles.

  5. Click Save.

Changing the Password

  1. Log in to CSE.
  2. Choose Exclusive ServiceComb Engines.
  1. Click the target ServiceComb engine with security authentication enabled.
  1. Choose System Management.
  2. In the displayed Security Authentication dialog box, enter the account name and password, and click OK.

    • If you connect to the ServiceComb engine for the first time, enter the account name root and the password entered when Creating a ServiceComb Engine
    • The account for connecting to the ServiceComb engine is not associated with the admin role. You can only change the password of the current login account.
    • The account for connecting to the engine is associated with the admin role. You can change the passwords of all accounts of the ServiceComb engine.
    • For details about how to create an account, see Adding an Account.

  3. On the Accounts tab, select the account for logging in to the ServiceComb engine and click Reset Own Password in the Operation column.

    1. Enter the old password and a new password, and confirm the password.
    2. After confirming that the password needs to be changed, select I Understand.

    You can also click Reset Own Password in the upper right corner of the System Management page to change the password of the current login account.

  1. Click Save.

Resetting a Password

  1. Log in to CSE.
  2. Choose Exclusive ServiceComb Engines.
  1. Click the target ServiceComb engine with security authentication enabled.
  1. Choose System Management.
  2. In the displayed Security Authentication dialog box, enter the name and password of the account associated with the admin role under the ServiceComb engine, and click OK.

  3. On the Accounts tab page, select the account whose password is to be reset, and click Reset Password in the Operation column.

    1. Enter a new password and confirm the password.
    2. After confirming that the password needs to be reset, select I Understand.

  1. Click Save.

Deleting an Account

  1. Log in to CSE.
  2. Choose Exclusive ServiceComb Engines.
  1. Click the target ServiceComb engine with security authentication enabled.
  1. Choose System Management.
  2. In the displayed Security Authentication dialog box, enter the name and password of the account associated with the admin role under the ServiceComb engine, and click OK.

  3. On the Accounts tab page, click Delete in the Operation column of the account to be deleted.
  4. In the displayed dialog box, enter DELETE and click OK.
Parent topic: System Management