Creating a User Group and Assigning Permissions

Prerequisites

Before assigning permissions to a user group, you should learn about the permissions that can be added to the user group and select the permissions as required. For details about the system permissions supported by the Cost Center, see Introduction.

Process Flow

Figure 1 Process for granting permissions

1. Create a user group and assign permissions to it.

   Create a user group on the IAM console, and assign operation permissions for the Cost Center to BSS Administrator.

2. Create an IAM user and add it to a group.

   Create a user on the IAM console and add the user to the group created in 1.

3. Log in to Cost Center and verify permissions.

   Log in to Cost Center using the account of the created user and verify whether the created user has the permission for exporting cost details.

   On the Cost Analysis page, click export records to verify it. If the export is successful, the BSS Administrator permission has taken effect.

Example Scenarios

• If users need full permissions to Cost Center, grant BSS Administrator to them.
• If users only need to view cost data in Cost Center, grant BSS ReadonlyAccess to them.
• If users need to perform financial operations, such as viewing and downloading cost analysis, grant BSS FinanceAccess to them.
• You can also create custom policies for more fine-grained permissions management. For details about the actions supported by custom policies, see Table 3.