检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Create a user group on the IAM console, and assign the UGO ReadOnlyAccess policy to the group. Create an IAM user. Create a user on the IAM console and add the user to the group created in 1. Log in as an IAM user and verify permissions.
IAM can be used for free. You pay only for the resources in your account. For more information about IAM, see What Is IAM? UGO Permissions By default, new IAM users do not have any permissions assigned.
IAM projects or enterprise project: Scope of users a permission is granted to. Policies that contain actions for both IAM and enterprise projects can be used and take effect for both IAM and Enterprise Management.
For example, to obtain an IAM token in the AP-Singapore region, obtain the endpoint of IAM (iam.ap-southeast-3.myhuaweicloud.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
Identity and Access Management (IAM) Identity and Access Management (IAM) manages permissions for UGO. Only users with the UGO administrator permissions can use UGO.
IAM User An IAM user is created using an account to use cloud services. Each IAM user has its own identity credentials (password and access keys) The account name, username, and password will be required for API authentication.
Fine-Grained Authorization UGO uses Identity and Access Management (IAM) to implement fine-grained permission management.
The API used to obtain a project ID is GET https://{Endpoint}/v3/projects/, where {Endpoint} indicates the IAM endpoint. You can obtain the IAM endpoint from Regions and Endpoints. For details about API authentication, see Authentication.
Table 1 Actions Function API Action IAM Project Enterprise Project Querying API versions / None. √ √ Querying a specified API version /{api_version} None. √ √ Querying quotas /v1/{project_id}/quotas ugo:jobs:getQuotas √ √ Converting SQL statements /v1/{project_id}/sql-conversion ugo
