检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Parent topic: IAM User SSO via SAML
an IAM User POST /v3/users iam:users:createUser - - Modifying User Information PATCH /v3/users/{user_id} iam:users:updateUser - - Deleting an IAM User DELETE /v3/users/{user_id} iam:users:deleteUser - - Creating an IAM User (Recommended) POST /v3.0/OS-USER/users iam:users:createUser
IAM User Management API Description Listing IAM Users Provided for the administrator to list all IAM users.
user IAM user IAM user Obtaining Account, IAM User, and Project Information user_id IAM user ID IAM user ID user_name IAM username IAM user name group User group User group Obtaining User Group Information group_id User group ID User group ID group_name User group name User group
IAM project: The name of an IAM project or region. If you select IAM project and enter a project name, the IAM project view is displayed. Parent topic: Permissions Management
Added the password_expires_at field to the response body in sections Listing IAM Users, Querying IAM User Details, Checking Whether an IAM User Belongs to a User Group, Creating an IAM User, and Modifying IAM User Information (By the Administrator). 2018-03-23 This issue is the third
Critical Operations Administrator: Full access IAM users: No access Login Authentication Policy Administrator: Full access IAM users: Read-only access Password Policy Administrator: Full access IAM users: Read-only access ACL Administrator: Full access IAM users: No access Accessing
Users Querying the MFA Device Information of an IAM User Listing Login Protection Configurations of IAM Users Querying the Login Protection Configuration of an IAM User Modifying the Login Protection Configuration of an IAM User Binding a Virtual MFA Device Unbinding a Virtual MFA
an IAM User 05:15 Obtaining the Token of an IAM User
How Do I Grant Cloud Service Permissions in the EU-Dublin Region to IAM Users? Why Have Permissions Granted to a User Not Been Applied? What Should I Do If an IAM User Does Not Have the Required Permissions to Access the IAM Console?
Figure 1 Content of the IAM ReadOnlyAccess policy { "Version": "1.1", "Statement": [ { "Action": [ "iam:*:get*", "iam:*:list*", "iam:*:check*" ], "Effect": "Allow" } ] }
Each IAM user can create a maximum of two access keys. The quota cannot be increased.
Project Management What Are the Differences Between IAM and Enterprise Management? What Are the Differences Between IAM Projects and Enterprise Projects? What Are the Differences Between IAM Users and Enterprise Member Accounts?
IAM user login: IAM users are created by an administrator to use specific cloud services. IAM user: An account and IAM users have a parent-child relationship. IAM users can only use specific cloud services based on assigned permissions.
Table 1 lists IAM endpoints. IAM is a global service with all data stored in the Global service project. All APIs of IAM can be called using the endpoint of a global service.
These settings take effect for both your account and the IAM users created using the account. Only the administrator can configure the login authentication policy, and IAM users can only view the configurations.
Format: /iam/agencies/delegation ID. For example: "uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"] Example Request Request to create a custom policy with display_name set to IAMAgencyPolicy and uri set to /iam/agencies/07805acaba800fdd4fbdc00b8f888c7c for an agency.
You can view the agency in the agency list on the IAM console. Creating a Cloud Service Agency on the IAM Console Log in to the IAM console. On the IAM console, choose Agencies from the navigation pane, and click Create Agency. Enter an agency name.
User Group Management Listing User Groups Querying User Group Details Creating a User Group Updating User Group Information Deleting a User Group Checking Whether an IAM User Belongs to a User Group Adding an IAM User to a User Group Removing an IAM User from a User Group Parent topic
For details about the two services, see What Are the Differences Between IAM and Enterprise Management? Solution to requirement 2: In IAM, company A creates IAM users for employees and adds the IAM users to different groups.
