Permissions Management

Related Concepts

IAM is a free service. You only pay for the resources in your account.

Examples

For example, you want to isolate permissions of employees in groups a and b. That is, employees in group a use Workspace Application Streaming resources in region 1, and employees in group b use Workspace Application Streaming resources in region 2.

1. You can create user groups A and B and assign them permissions. That is, assign user group A the Workspace Application Streaming administrator permissions in region 1, and assign user group B the Workspace Application Streaming administrator permissions in region 2.
2. Create two IAM users user1 and user2, and add user1 to user group A and user2 to user group B. user1 has the Workspace Application Streaming administrator permissions in region 1, and user2 has the Workspace Application Streaming administrator permissions in region 2.
3. The administrator of group a can use the account of user1 to log in to Huawei Cloud and go to the Workspace Application Streaming console of the project in region 1 to publish applications for the employees of group a and manage the applications of the project in region 1. The administrator of group b can use the account of user2 to log in to Huawei Cloud and go to the Workspace Application Streaming console of the project in region 2 to publish applications for the employees of group b and manage the applications of the project in region 2. Figure 1 shows the process. See Creating an IAM User.

Figure 1 Operation process

Workspace Application Streaming Administrator Permissions

By default, new IAM users do not have permissions assigned. You need to add a user to one or more groups, and grant Workspace Application Streaming administrator permissions to these groups. Users inherit permissions from their groups. After authorization, IAM users can perform operations on Workspace Application Streaming resources in the corresponding projects.

Table 1 lists all system permissions of Workspace (Application Streaming) and operation permissions required by dependent services. The Dependency column indicates roles on which a Workspace (Application Streaming) system permission depends to take effect. Workspace (Application Streaming) roles are dependent on the roles of other services because Huawei Cloud services interact with each other. Therefore, when assigning Workspace Application Streaming permissions to a user group, you need to select the permissions listed in Table 1. Do not cancel other dependent permissions that are selected by default. Otherwise, the Workspace Application Streaming permissions do not take effect.

Creating an IAM User for Workspace Application Streaming

1. Creating a user group and assigning permissions

   Create a user group on the IAM console, and assign the Workspace Administrator, IMS Administrator, and ECS FullAccess permissions listed in Table 1 to the group. Then select the authorization scope.

2. Creating a user and adding them to the user group

   Create a user on the IAM console and add the user to the group created in 1.

3. Log in and verify permissions.

   Log in to the Workspace Application Streaming console as the newly created user, and verify whether the user has the administrator permissions.

   1. Log in to the Workspace Application Streaming console.
   2. Select Authorize. The Workspace Application Streaming console is displayed.
      NOTICE:

      Workspace Application Streaming supports elastic scaling. You need to obtain user authorization to create an agency account so that the system can automatically scale in or out after elastic scaling is enabled.

   3. After the service is enabled, click Server Groups in the navigation pane. On the Server Groups page, click Create Server Group in the upper right corner. If no message indicating insufficient permissions is displayed, the granted permissions have taken effect.