Step 3 Configure Agent-based ModelArts Access Authorization for the User

After assigning IAM permissions, configure ModelArts access authorization for IAM users on the ModelArts page so that ModelArts can access dependent services such as OBS, SWR, and IEF.

In agent-based ModelArts access authorization, only tenant users are allowed to configure for their IAM users. Therefore, in this example, the administrator needs to configure access authorization for all the IAM users.

1. Use the tenant account to log in to the ModelArts management console. Select your region in the upper left corner.
2. In the navigation pane on the left, choose Settings. The Global Configuration page is displayed.
3. Click Add Authorization. On the Add Authorization page, set Authorized User to All users and click Add agency to configure the agency-based authorization for all IAM users under the account.
   • Common User: You can use basic ModelArts functions, for example, accessing data and creating and managing training jobs, but not to manage resources. Select this option generally.
   • Custom: You can flexibly assign permissions to the created agency. Select this option for refined permissions management. You can select permissions from the permission list as required.
     Figure 1 Common user permissions
     
4. Select I have read and agree to the ModelArts Service Statement. Click Create.
   Figure 2 Configured agency authorization