How Do I Grant Cloud Service Permissions in the EU-Paris Region to IAM Users?

Symptom

The administrator has enabled cloud services in the EU-Paris region, and need to authorize IAM users to use cloud services in this region.

Users access cloud services in the EU-Paris region as virtual users authorized through federated authentication. They are not real users who exist in the cloud service system, and need to be authorized in Huawei Cloud's default regions and the EU-Paris region, respectively.

Prerequisites

• You have created an IAM user in a default region of Huawei Cloud and added the user to a user group. For example, you have created IAM user User-001 and added them to user group UserGroup-001. For details, see Creating a User and Managing IAM Users and Permissions.
• If this is the first time to grant cloud service permissions for IAM users in the EU-Paris region, you need to use an account rather than an IAM user with administrator permissions to perform authorization operations.

Procedure

1. Log in to Huawei Cloud as an administrator, click on the console homepage, and select the EU-Paris region.
2. On the console, choose Management & Governance > Identity and Access Management.
3. On the IAM console, choose User Groups from the navigation pane, and click Create User Group in the upper right corner to create a group with the same name (UserGroup-001).
4. On the User Groups page, click Modify in the row that contains the user group created in 3.
5. In the Group Permissions area, click Attach Policy in the row that contains the target region for user authorization, select desired permissions, and click OK.

   The permissions assigned to this group will also apply to IAM users in the user group in Huawei Cloud.

6. Click OK to complete the authorization for IAM users in the EU-Paris region.

After the authorization is complete, log in to the Huawei Cloud console as an IAM user. Select the EU-Paris region and use cloud resources based on the assigned permissions.