Help Center/ Huawei HiLens/ User Guide/ Permissions Management/ Creating a User and Granting Permissions
Updated on 2022-08-19 GMT+08:00

Creating a User and Granting Permissions

This section describes how to use Identity and Access Management (IAM) to implement fine-grained permissions control for your Huawei HiLens. With IAM, you can:

  • Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials for access to Huawei HiLens.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust other Huawei Cloud accounts or cloud services to perform efficient O&M on your Huawei HiLens resources.

If your Huawei Cloud account does not require individual IAM users, skip this section.

This section describes the procedure for granting permissions. See Figure 1.

Prerequisites

Before granting permissions to a user group, you need to learn about the Huawei HiLens permissions that can be added to the user group and select the permissions based on site requirements. For details, see Permissions Management. For the system policies of other services, see System Permissions.

Procedure

Figure 1 Procedure for granting Huawei HiLens permissions
  1. Create a user group and assign permissions to it.

    Create a user group on the IAM console, and assign the HiLens CommonOperations policy to the group. To apply for the OBT, and set alarm receiving and skill messages, you must be granted the SMN Administrator role.

  2. Create an IAM user and add it to the user group.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in as the user and verify permissions.

    Log in to the Huawei HiLens console as the created user, switch to the authorized region, and verify the permissions.

    Choose Service List > Huawei HiLens to enter the Huawei HiLens home page. Then, choose Device Management > Devices, locate the target device card, and choose Operation > Deregister (if the device needs to be activated after being registered, refund its management fee before deregistering it). If you cannot deregister the device (assume that the current permission contains only HiLens CommonOperations), HiLens CommonOperations has already taken effect.