检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Parent topic: IAM User Management
Creating a User and Granting IAM Identity Center Permissions You can use Identity and Access Management (IAM) for fine-grained permissions control for your IAM Identity Center. With IAM, you can: Create IAM users for personnel based on your enterprise's organizational structure.
For IAM endpoints, see Regions and Endpoints. Restrictions When you use this API to create an IAM user, you cannot specify a mobile number or email address for the IAM user.
Table 5 users Parameter Type Description name String IAM username. links Object IAM user resource link information. domain_id String ID of the account used to create the IAM user. enabled Boolean Enabling status of the IAM user. true (default value) indicates that the user is enabled
To disable an individual IAM user, see Modifying Basic Information About an Individual IAM User. To disable multiple IAM users at a time, see Batch Modifying IAM User Information.
IAM User Permissions With IAM, you can grant fine-grained permissions to IAM users under your account by configuring permission policies. The following table lists the permissions that are required for IAM users to use different MgC functions.
For example, if you enter the IAM console URL, users will land on the IAM console after login. Description Description of a permission set.
IAM User Permissions With IAM, you can configure permission policies to grant IAM users in your account fine-grained MgC permissions, enabling effective permission isolation.
Modifying IAM User Information (By an IAM User) (Recommended) Function This API can be used by an IAM user to modify its basic information. The API can be called using either a global endpoint or a region-specific endpoint. For IAM endpoints, see Regions and Endpoints.
an IAM User Managing Permissions Assigned to IAM Users Deleting IAM Users
Access Methods You can access IAM using either of the following methods: Management console Access IAM through the management console ─ a browser-based visual interface. For details, see Accessing the IAM Console. REST APIs Access IAM using REST APIs in a programmable way.
Creating an IAM Project and Assigning Permissions Creating an IAM Project Go to the management console, hover over the username in the upper right corner, and choose Identity and Access Management from the drop-down list.
IAM Permissions Management Creating a User and Granting Permissions
IAM User Management Listing IAM Users Querying IAM User Details (Recommended) Querying IAM User Details Querying the User Groups Which an IAM User Belongs to Querying the IAM Users in a Group Creating an IAM User (Recommended) Creating an IAM User Changing the Login Password Modifying
Adding IAM Users to or Removing IAM Users from a User Group A user inherits permissions from the groups which the user belongs to. To change the permissions of a user, add the user to a new group or remove the user from an existing group.
Logging In as an IAM Identity Center User and Accessing Resources You can use an IAM Identity Center username and password to log in to the management console through the user portal URL.
IAM Permissions Management Creating a User and Granting Permissions
IAM Permissions Management Creating a User and Granting Permissions
IAM Permissions Management Creating a User and Granting CBS Permissions
For more information, see Creating an IAM User. Parent topic: Getting Started