Creating and Authorizing a User to Use Huawei Cloud Astro Zero

Use IAM for fine-grained permissions control on your Huawei Cloud Astro Zero resources. With IAM, you can:

Create IAM users for employees. This gives each IAM user their own security credentials to use resources.
Assign users only the permissions they need for a task.
Entrust a Huawei account or cloud service to perform efficient O&M on resources.

Operation Scenario

When you sign up for Huawei Cloud, you get an account. This account can use all your resources and pay for them. For security purposes, create an IAM user with the Astro Zero Instance ManageAccess and Astro Zero Instance ManageAccess system policies. With these, the IAM user can purchase Huawei Cloud Astro Zero instances, add other IAM users of the same Huawei Cloud account to Huawei Cloud Astro Zero, and assign them the administrator or developer permissions.

Figure 1 Assigning permissions to a user

Prerequisites

Before assigning permissions to a user group, learn about the system policies. For details, see Permissions Management. For the permissions of other services, see System-defined Permissions.

Creating an IAM User and Assigning Permissions

IAM users with the Astro Zero Instance ManageAccess and Astro Zero IAM User QueryAccess permissions can purchase instances and add other IAM users of the same Huawei Cloud account to Huawei Cloud Astro Zero. If the IAM user only needs to purchase instances, only the Astro Zero Instance ManageAccess permission needs to be assigned to the user group. For details about the system policies, see Permissions Management.

Log in to the IAM console.
Create a user group and assign permissions to it.
1. Choose User Groups and click Create User Group.
2. Enter a user group name and click OK.
3. In the user group list, click Authorize next to the created user group.
4. Select Astro Zero Instance ManageAccess and Astro Zero IAM User QueryAccess and click Next.
  Figure 2 Assigning required permissions to a user group
5. Select the authorization scope and click OK.
  Figure 3 Assigning permissions to the user group to which an IAM user belongs (Setting the min. authorization scope)
Create an IAM user and add the user to the user group.
1. Choose Users and click Create User.
2. Configure basic information and click Next.
  For details about the parameters, see Creating an IAM User.
3. Select the user group created in 2 and click Create User.
Use the IAM user added in 3 to log in to Huawei Cloud Astro Zero and apply for a free instance or purchase a commercial one.
1. Log in to the Huawei Cloud Astro Zero console using an IAM account.
  Figure 4 Logging in as an IAM user
2. Apply for a free instance or purchase a commercial one by referring to the operations in Applying for Free Trial and Purchasing a Standard Instance.