检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
On the displayed page, set the username and password to create an IAM user. Figure 2 Create User Figure 3 Setting the username and password Grant the admin permission to the IAM user.
Logging In as an IAM User and Verifying Permissions Log in to the console using the IAM user you created and verify the permissions. Assume that an IAM user has only the OCR ReadOnlyAccess permission, that is, the read-only access permission.
Assigning Permissions to IAM Users Subscribing to an OCR Service as an IAM User Log in to the IAM console using a master account. Choose User Groups in the left navigation pane.
If the token is obtained by an IAM user (multiple IAM users can be created under an account), user name is a real-world username and is different from domain name. The project name can be set to cn-north-4.
a specific IAM user (user 2), and not for the current account.
You are advised to create a new IAM user with a different name and grant it the necessary permissions before proceeding with any related operations. For details, see Creating an IAM User and Assigning Permissions to IAM Users.
If a master account only grants the OCR ReadOnlyAccess permission or no permission at all to an IAM user, only the master account (or IAM users with the OCR FullAccess permission) can subscribe to OCR services for that IAM user.
The fees generated by IAM users when operating resources are uniformly charged to the account, and IAM users do not need to pay for resources. An account can be used to create IAM users and assign permissions to the IAM users.
Possible Causes The possible cause is that the current user is an IAM user who does not have the permission to subscribe to the service. An account and its IAM users share a parent-child relationship.
If the error message "Incorrect IAM authentication information: x-auth-token not found" and error code "APIG.0301" are displayed, X-Auth-Token is not included in the request header.
Figure 4 Selecting Identity and Access Management Grant the admin or Full Access permission to the IAM user. Once done, the IAM user can view service monitoring data.
You can also subscribe to or unsubscribe from an OCR service for the IAM users under your account. Figure 1 Unsubscribing from an OCR service Figure 2 Subscribing to or unsubscribing from an OCR service for the IAM users under your account
The master account can subscribe to or unsubscribe from IAM users' services on the Subscription Management page.
The master account holder can log in to the IAM console, click Security Settings in the Operation column for the corresponding IAM user, and enter the settings page. Figure 1 Setting programming access permissions Parent topic: Token-based Authentication
Creating a User Group and an IAM User Creating a User Group Log in to the IAM console using a master account. On the IAM console, choose User Groups from the navigation pane, and click Create User Group in the upper right corner. In the displayed page, enter a user group name.
Figure 1 Procedure Creating an IAM User and Granting Permissions For details about how to create an IAM user, see Creating a User Group and an IAM User. For details about how to authorize an IAM user to use OCR, see Assigning Permissions to IAM Users.
Permission Management Permissions Management Creating a User Group and an IAM User Assigning Permissions to IAM Users Logging In as an IAM User and Verifying Permissions OCR Custom Policies
Related Services IAM Identity and Access Management (IAM) lets you control user authentication and access to OCR. Cloud Eye Cloud Eye monitors the metrics of OCR listed in Table 1. You use these metrics to monitor OCR usage.
In this scenario, you can create IAM users for the software developers and grant them only the permissions required for using OCR resources. IAM is free of charge. You pay only for the resources you use. For more information about IAM, see IAM Service Overview.
Access Control OCR supports access control through permissions (IAM permissions).
