Creating a User and Granting the CNAD Pro Access Permission

You can use Identity and Access Management (IAM) for refined permissions control for CNAD Pro resources. To be specific, you can:

Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing CNAD resources.
Grant only the permissions required for users to perform a specific task.
Entrust a Huawei Cloud account or cloud service to perform professional and efficient O&M to your CNAD resources.

If your Huawei Cloud account does not require individual IAM users, skip this section.

Figure 1 Process for granting permissions

Create a user group and assign permissions to it.
Create a user group on the IAM console, and grant the CNAD FullAccess permission to the group.
Create an IAM user and add the user to the group.
Create a user on the IAM console and add the user to the group created in 1.
Log in and verify permissions.
Log in to the management console using the created user, and verify the user's permissions.

Hover over in the upper left corner, select any other services (for example, there is only the CNAD FullAccess policy). If a message indicating that the permission is insufficient is displayed, the CNAD FullAccess permission has taken effect.