Help Center/ GeminiDB/ GeminiDB HBase API/ Working with GeminiDB HBase API/ Using IAM to Grant Access to GeminiDB HBase API/ Creating a User and Granting Permissions to Use GeminiDB HBase API
Updated on 2025-08-05 GMT+08:00

Creating a User and Granting Permissions to Use GeminiDB HBase API

This section describes how to use IAM to control fine-grained permissions for your GeminiDB resources. With IAM, you can:

  • Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing GeminiDB resources.
  • Grant only the permissions required for users to perform a specific task.
  • Entrust a Huawei Cloud account or cloud service to perform efficient O&M on your GeminiDB resources.

If you do not need to create an IAM user, skip this section.

The following describes the procedure for granting permissions (see Figure 1).

Prerequisites

You have learned about permissions that can be granted to the user group. For details, see GeminiDB Permissions. For system permissions of other services, see Permission Policies.

Process Flow

Figure 1 Process of granting GeminiDB permissions
  1. Create a user group and assign permissions.

    Create a user group on the IAM console and assign the GeminiDB FullAccess permission to the group.

    To use some interconnected services, you also need to configure permissions of such services.

    For example, when connecting to your instance through DAS, you need to obtain the GeminiDB FullAccess and DAS FullAccess permissions.

  2. Create an IAM user and add it to a user group.

    Create a user on the IAM console and add the user to the group created in 1.

  3. Log in and verify permissions.

    Log in to the management console using the created user, and verify the user's permissions:

    Choose Service List > GeminiDB and click Buy DB Instance. If you can buy an instance, the required permission policy has taken effect.