Help Center/ Enterprise Switch/ User Guide/ Permissions Management/ Using IAM Roles or Policies to Grant Access to Enterprise Switch

Updated on 2025-11-13 GMT+08:00

View PDF

Using IAM Roles or Policies to Grant Access to Enterprise Switch

The role/policy-based authorization provided by Identity and Access Management (IAM) let you control access to Enterprise Switch. With IAM, you can:

Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing Enterprise Switch resources.
Grant only the permissions required for users to perform a specific task.
Entrust a HUAWEI ID or a cloud service to perform efficient O&M on your Enterprise Switch resources.

If your account does not require individual IAM users, skip over this section.

Figure 1 shows the procedure for granting permissions.

Before granting permissions to user groups, learn about system-defined permissions in Role/Policy-based Permissions Management for Enterprise Switch. To grant permissions for other services, learn about all system-defined permissions supported by IAM.

Figure 1 Process for granting Enterprise Switch permissions

Create a user group and assign permissions.
Create a user group on the IAM console, and assign the Tenant Guest policy to the group.
Create a user and add the user to the user group.
Create a user on the IAM console and add the user to the group created in 1.
Log in and verify permissions.
Log in to the Enterprise Switch console as the created user, switch to the authorized region, and verify the user permissions.

Click Service List and choose Enterprise Switch. Then click Buy in the upper right corner. If the enterprise switch fails to be created, the Tenant Guest permission has taken effect.