Creating a User Group and Assigning Permissions

Creating User Groups

1. Use your HUAWEI ID to enable Huawei Cloud services, and then log in to Huawei Cloud.
   Figure 1 Logging in to Huawei Cloud
   

2. Click Console in the upper right corner.
   Figure 2 Logging in to the management console
   

3. On the management console, hover the mouse pointer over the username in the upper right corner, and choose Identity and Access Management from the drop-down list.
   Figure 3 Accessing the IAM console
   

4. On the IAM console, choose User Groups from the left navigation pane, and click Create User Group.
   Figure 4 Creating a user group
   

5. Enter developers for Name, and click OK.
   Figure 5 Specifying user group details
   

6. Create the testers group by referring to steps 4 and 5.

Assigning Permissions to User Groups

Developers in the company need to use ECS, RDS, ELB, VPC, EVS, and OBS, so the administrator needs to assign the required permissions to the developers group to enable access to these services. Testers in the company need to use Cloud Eye, so the administrator needs to assign the required permissions to the testers group to enable access to the service. After a user is added to an authorized user group, the user can use cloud services based on the assigned permissions. For details about the system-defined identity policies of all cloud services, see System-defined Permissions.

1. Check the required permissions according to System-defined Permissions. Table 1 lists the permissions to be set.

   Table 1 Required permissions

   User Group	Cloud Service	Permissions
   developers	ECS	ECSFullPolicy
   	RDS	RDSFullAccessPolicy
   	ELB	ELBFullAccessPolicy
   	VPC	VPCFullAccessPolicy
   	EVS	EVSFullAccessPolicy
   	OBS	OBSFullAccessPolicy
   testers	Cloud Eye	CESFullAccessPolicy

   

   You are advised to adhere to the principle of least privilege and grant only the permissions required for a user to perform a specific task. System-defined policies are provided for all Huawei Cloud users and do not grant the minimum permissions required for your specific use cases.

2. In the user group list, click Authorize in the row containing the user group developers.
   Figure 6 Authorizing a user group
   

3. Select the permissions to be assigned and click OK. The user group will have the required permissions listed in Table 1.
   

   Due to system, cache, and other reasons, the identity policies will be applied several minutes after the authorization is complete.

4. Refer to steps 2 to 3 to assign the CESFullAccessPolicy permissions to the testers group.