检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
What Should I Do If the IAM Account Permissions Are Abnormal? To use server monitoring, users in a user group must have the Security Administrator permissions. If they do not, a message indicating abnormal permissions is displayed.
Creating a User and Granting Permissions IAM enables you to perform a refined management on your Cloud Eye service. It allows you to: Create IAM users for employees based on your enterprise's organizational structure.
IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see What Is IAM? Cloud Eye Permissions By default, IAM users do not have permissions.
Generally, this is because that the IAM user account does not have sufficient permissions. Check your permissions configured on IAM. Use the Huawei Cloud account to log in to the Huawei Cloud management console.
For example, to obtain an IAM token in the CN-Hong Kong region, obtain the endpoint of IAM (iam.ap-southeast-1.myhuaweicloud.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
listAgencies", "iam:agencies:getAgency", "iam:agencies:createAgency", "iam:permissions:grantRoleToAgency", "iam:permissions:grantRoleToAgencyOnProject", "iam:permissions:revokeRoleFromAgencyOnProject
IAM user login: IAM users are created by an administrator to use specific cloud services. Federated user login: Federated users are registered with an enterprise IdP that is created by the administrator in IAM.
For details about the differences between IAM and enterprise management, see What Are the Differences Between IAM and Enterprise Management?
When configuring alarm rules, only Huawei Cloud accounts or IAM users with the Tenant Administrator permissions can select all resources. For details about how to assign the Tenant Administrator permissions to an IAM user, see . Parent topic: General Consulting
The validity period of a token obtained from IAM is 24 hours. If you want to use a token for authentication, cache it to avoid frequently calling the IAM API. Procedure Obtain the token by referring to Authentication. Query the list of metrics that can be monitored.
Data Protection Technologies For data protections, you are advised to protect Huawei Cloud account credentials and use IAM to set up individual user accounts. In this way, each user is given only the permissions necessary to fulfill their job duties.
For security purposes, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created by an account in IAM to use cloud services. Each IAM user has its own identity credentials (password and access keys).
"password": "********", //IAM user password "domain": { "name": "domainname" //Name of the account to which the IAM user belongs } } } }, "scope": {
Figure 1 DNS server address Check IAM agency quota Log in to the management console. In the service list, select Identity and Access Management. On the IAM console, choose Agencies. Check the agency quota. Check whether there is the agency: CESAgentAutoConfigAgency.
Creating Alarm Notification Topics Viewing the Alarm History Permissions Management If you need to perform fine-grained permission management on Cloud Eye, you can use IAM to: Create IAM users for employees based on your enterprise's organizational structure.
Supported Actions of the Event Monitoring API Permission API Action IAM Project Enterprise Project Report custom events. POST /V1.0/{project_id}/events ces:events:post √ × Parent topic: Permissions Policies and Supported Actions
User Permissions What Should I Do If the IAM Account Permissions Are Abnormal? What Can I Do If the System Displays a Message Indicating Insufficient Permissions When I Access Cloud Eye?
Supported Actions of the Quota Management API Permission API Action IAM Project Enterprise Project Query a resource quota and the used amount. Currently, the resource refers to alarm rules only.
Supported Actions of the API Version Management APIs Permission API Action IAM Project Enterprise Project Query all API versions supported by Cloud Eye. GET / ces:versions:get √ × Query a specified Cloud Eye API version.
Supported Actions of the Metric Management API Permission API Action IAM Project Enterprise Project Query the metric list. You can specify the namespace, metric name, dimension, sorting order, start records, and the maximum number of records when using this API to query metrics.
