Getting Started with IAM in 2 Steps
Getting Started with IAM in 2 Steps
Create User Groups and Assign Permissions
Create user groups for different departments in your enterprise and assign permissions to these groups based on job functions. The admin group has all permissions for your cloud resources.
Create IAM Users and Log In
Create IAM users for your enterprise staff and add them to different groups. The users have their own credentials and can perform operations on cloud resources based on the permissions inherited from the groups.
Best Practices
Best Practices
Assigning Permissions to O&M Personnel
If your company has purchased different resources on Huawei Cloud, and has multiple functional teams that need to use one or more types of resources, you can use IAM to assign permissions to different personnel based on their job functions for refined permissions control.
Cross-Account Access Delegation and Resource Management
If you want to delegate another account to manage your cloud resources, you can create an agency in IAM to establish a trust relationship with the other account.
Authorizing IAM Users to Manage Resources of an Account
You can delegate access to another company for professional O&M. The delegated company can assign permissions to its own IAM users for fine-grained permissions management.
Configuring an Agency for an ECS
Huawei Cloud Elastic Cloud Server (ECS) provides secure, scalable, on-demand compute resources. You can delegate permissions to an ECS by creating an agency and then the ECS can obtain a temporary credential of the agency to access other cloud services.