Help Center/ MetaStudio/ User Guide/ Permissions Management/ Creating a User and Assigning MetaStudio Permissions
Updated on 2025-08-25 GMT+08:00

Creating a User and Assigning MetaStudio Permissions

This section describes how to use Identity and Access Management (IAM) to implement refined permissions management for your MetaStudio resources. With IAM, you can:

  • Create IAM users for employees based on your enterprise's organizational structure within your Huawei Cloud account. Each IAM user will have their own security credentials for accessing MetaStudio resources.
  • Assign only the permissions required for users to perform a specific task.
  • Assign a Huawei Cloud account or a cloud service the permissions needed for professional and efficient O&M on your MetaStudio resources.

If your Huawei Cloud account does not need individual IAM users, skip this section.

This section describes the procedure for assigning permissions (see Process Flow).

Prerequisites

Before assigning permissions to user groups, you should learn about system-defined policies supported by MetaStudio and select the policies based on service requirements.

For details about the system-defined policies supported by MetaStudio, see MetaStudio Permissions. For the permissions of other services, see System-defined Permissions.

Process Flow

Figure 1 Process for assigning MetaStudio permissions

  1. Create a user group and assign permissions.

    Create a user group on the IAM console, and assign the group the MetaStudio FullAccess permission (of MetaStudio administrator).

  2. Create a user and add them to the user group.

    Create a user on the IAM console and add the user to the user group created in 1.

  3. Log in and verify permissions.

    Log in to the console as the newly created user, and verify whether the user has the MetaStudio FullAccess permission.

    Choose MetaStudio from the service list. On the page displayed, click Create under Image modeling and create a virtual avatar by referring to Image Modeling. If the creation is successful, MetaStudio FullAccess has taken effect.

MetaStudio Custom Policies

You can create custom policies to supplement the system-defined policies of MetaStudio.

To create a custom policy on Huawei Cloudthe cloud service platform, choose either visual editor or JSON.

  • Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy syntax.
  • JSON: Create a JSON policy or edit an existing one.

For details, see Creating a Custom Policy. Examples of common MetaStudio custom policies:

  • Example 1: Assigning all permissions for MetaStudio
    {
        "Version": "1.1",
        "Statement": [
            {
                "Action": [
                    "metastudio:*:*"
                ],
                "Effect": "Allow"
            }
        ]
    }
  • Example 2: Assigning the read-only permission for MetaStudio
    {
        "Version": "1.1",
        "Statement": [
            {
                "Action": [
                    "metastudio:*:show*",
                    "metastudio:*:list*"
                ],
                "Effect": "Allow"
            }
        ]
    }