检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Creating a User and Granting VBS Permissions This chapter describes how to use IAM to implement fine-grained permissions control for your VBS resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
IAM is a global service. You can create an IAM user using the endpoint of IAM in any region.
IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see IAM Service Overview. VBS Permissions By default, new IAM users do not have permissions assigned.
A policy can be applied to IAM projects, enterprise projects, or both. Policies that contain actions for both IAM and enterprise projects can be used and take effect for both IAM and Enterprise Management.
API for obtaining tokens from IAM VBS API for creating backups Procedure Obtain the token by following instructions in Calling APIs. Send POST https://VBS endpoint/v2/project ID/cloudbackups. Add the X-Auth-Token request header.
The following is part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
name "password": "********", // IAM user password "domain": { "name": "domainname" // Name of the account to which the IAM user belongs } } } }, "scope
To ensure account security, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created by an account in IAM to use cloud services. Each IAM user has its own identity credentials (password and access keys).
{Endpoint} is the IAM endpoint and can be obtained from Regions and Endpoints. For details about API authentication, see Authentication. The following is an example response.
Use a valid token. 400 VolumeBackup.0009 call IAM api to get shadow domain ak and sk fail. Failed to obtain the key. For details, contact the technical support. 400 VolumeBackup.0010 api request parameter volume_id null Parameter volume_id in the request is empty.
