SecMaster Permissions and Supported Actions

This topic describes fine-grained permissions management for your SecMaster. If your account does not need individual IAM users, then you may skip over this section.

By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and assign permissions policies to these groups. Users inherit permissions from the groups to which they are added and can perform specified operations on cloud services based on the permissions.

Permissions are classified into roles and policies based on the authorization granularity. A role is a coarse-grained authorization mechanism provided by IAM to define permissions based on users' job responsibilities. A policy defines permissions required to perform operations on specific cloud resources under certain conditions. IAM uses policies to perform fine-grained authorization.