检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing FlexusRDS resources. Grant only the permissions required for users to perform a specific task.
Solution Add the IAM user to a user group and grant the group CORS FullAccess permissions. Then, the IAM user inherits the permissions granted to the user group. The following describes how to grant permissions to an IAM user.
users: Creating a custom policy: iam:agencies:listAgencies iam:agencies:createAgency iam:permissions:listRolesForAgencyOnProject iam:permissions:grantRoleToGroupOnProject iam:roles:listRoles cors:productInstance:createDefault Adding system role Security Administrator: Select a user
Add the IAM user to the group. For details, see Adding Users to a User Group. Apply for the COC open beta testing (OBT). COC is in the OBT phase. After you have been granted the COC FullAccess permissions, apply for the COC OBT.
For details, see Granting IAM Users Under an Account the Access to a Bucket and the Resources in It. Download the backup file. On the OBS Browser+ page, click the bucket that you added.
NOTE: If you are an IAM user, you need to request permissions by referring to Organization Management before using private images in the account. Currently, FlexusCCI does not support third-party image repositories. A single layer of the decompressed image must not exceed 20 GB.
If you have created an agency in IAM, select the agency from the drop-down list. For more information about agencies, see Account Delegation. FlexusX Group: Select the FlexusX instance group you want to add your FlexusX instance to.
If you use an IAM user for migration, you need to obtain the required permissions. For more information, see Creating a User Group and Assigning Permissions. Obtain an AK/SK pair for your target account. The AK/SK pair will be used for authentication during the migration.
