Registering a Delegated Administrator

Updated on 2025-02-20 GMT+08:00

View PDF

By default, only the Organizations management account can use and manage IAM Identity Center. The management account can delegate administration of IAM Identity Center to a member account in your organization to extend the ability to manage IAM Identity Center.

This operation will delegate IAM Identity Center administrative access permissions to users in this member account. All users who have sufficient permissions for the delegated administrator account can perform all IAM Identity Center administrative tasks from this account, except for:

Deleting IAM Identity Center
Registering other member accounts as delegated administrators
Managing assignments to the management account
Enabling or disabling access permissions of a user
Managing permission sets provisioned to the management account

Procedure

Log in to the Huawei Cloud console.
Click in the upper left corner of the page and choose Management & Governance > IAM Identity Center.
Choose Settings in the navigation pane.
On the Management tab, click Register.
In the displayed dialog box, select a member account and click OK.

Figure 1 Registering a delegated administrator
In the delegated administrator list, locate the target account and click Deregister in the Operation column. After the deregistration, this account will lose administrative access to IAM Identity Center.

Figure 2 Deregistering a delegated administrator