Creating a User and Granting Permissions to Use GeminiDB HBase API
This section describes how to use IAM to control fine-grained permissions for your GeminiDB resources. With IAM, you can:
- Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing GeminiDB resources.
- Grant only the permissions required for users to perform a specific task.
- Entrust a Huawei Cloud account or cloud service to perform efficient O&M on your GeminiDB resources.
If you do not need to create an IAM user, skip this section.
The following describes the procedure for granting permissions (see Figure 1).
Prerequisites
You have learned about permissions that can be granted to the user group. For details, see GeminiDB Permissions. For system permissions of other services, see Permission Policies.
- Create a user group and assign permissions.
Create a user group on the IAM console and assign the GeminiDB FullAccess permission to the group.
To use some interconnected services, you also need to configure permissions of such services.
For example, when connecting to your instance through DAS, you need to obtain the GeminiDB FullAccess and DAS FullAccess permissions.
- Create an IAM user and add it to a user group.
Create a user on the IAM console and add the user to the group created in 1.
- Log in and verify permissions.
Log in to the management console using the created user, and verify the user's permissions:
Choose Service List > GeminiDB and click Buy DB Instance. If you can buy an instance, the required permission policy has taken effect.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot