检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Authenticate identities and securely manage access to your services and resources
Authenticate identities and securely manage access to your services and resources
How Do I Control IAM User Access to the Console? How Can I Obtain Permissions to Create an Agency?
Service Overview What Is IAM Identity Center? Application Scenarios Notes and Constraints Permissions Concepts 04 APIs Use diverse APIs provided by IAM Identity Center to manage instances, permission sets, account assignments, and users.
to date with industry standards and best practices and perform architecture design for IAM services. * Design and develop key IAM service modules. * Design the system architecture for the IAM services of public and jointly-operated clouds.
EdgeSec.00010001 Invalid IAM Service Project (Failed to get IAM projects) Root Cause This error was reported when an IAM project is abnormal. Troubleshooting Methods Check the IAM projects. Solution Log in to the EdgeSec console.
IAM Identity Center Resetting If you no longer need to use IAM Identity Center, intend to enable IAM Identity Center in a different region, or intend to create a new configuration from scratch, you can delete all data configured in IAM Identity Center.
With IAM, you can use your Huawei Cloud account to create IAM users, and assign permissions to the users to control their access to specific resources.
What Is IAM Identity Center? Introduction IAM Identity Center helps you centrally manage your workforce identities and their access to multiple Huawei Cloud accounts.
If your Huawei Cloud account does not need individual IAM users for permission management, you may skip this section. IAM is a free service. You only pay for the resources in your account. For more information about IAM, see What Is IAM?
Logging In as an IAM Identity Center User and Accessing Resources After associating member accounts of an organization with an IAM Identity Center user and permission sets, you can use the IAM Identity Center username and password to log in to the console through the user portal URL
Using IAM to Grant Access to IAM Identity Center Creating a User and Granting IAM Identity Center Permissions Creating IAM Custom Policies for IAM Identity Center
IAM User Permission Management Overview IAM users are created on Identity and Access Management (IAM) to use cloud services based on assigned permissions. Each IAM user has their own identity credentials (passwords and access keys).
Creating IAM Custom Policies for IAM Identity Center You can create custom policies to supplement the system-defined policies of IAM Identity Center. To create a custom policy, choose either visual editor or JSON.
IAM Synchronization Obtaining Synchronized IAM Users and User Groups Synchronizing an IAM User and User Group Cancelling Synchronization of Specified Users and User Groups Parent topic: API V2
IAM Error Codes If an error code starting with APIGW is returned after you call an API, rectify the fault by referring to the instructions provided in Error Codes. For details about IAM error codes, see IAM Error Codes. Parent Topic: Appendix
Procedure Log in to the IAM console. On the IAM console, choose Agencies from the navigation pane on the left, and click Create Agency in the upper right corner. Figure 1 Creating an agency Enter an agency name. Set Cloud Service to RFS.
IAM Projects and Enterprise Projects IAM Projects Projects in IAM group and isolate OpenStack resources (compute, storage, and network resources). Resources in your account must be mounted under projects. Each project can be a department or a project team.
Permissions IAM permissions control IAM users under an account to access: All cloud resources.
Enabling an IAM Identity Center Instance Function This API is used to enable an IAM Identity Center service instance. It can be called only from the organization's management account.
Creating a User and Granting IAM Identity Center Permissions You can use Identity and Access Management (IAM) for fine-grained permissions control for your IAM Identity Center. With IAM, you can: Create IAM users for personnel based on your enterprise's organizational structure.
Creating an IAM User and Granting OBS Permissions You can use IAM for fine-grained access control over your OBS resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
Creating an IAM User and Granting TaurusDB Permissions This section describes how to use IAM for fine-grained permissions control over your TaurusDB resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
IAM This section describes the IAM permission configurations for all ModelArts functions.
