检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Changing the Identity Source Enabling and configuring ABAC in IAM Identity Center IAM Identity Center as identity source: Enable ABAC on the IAM Identity Center console and add user attributes for configuring ABAC.
Replace the fields in bold with the actual values. accountid: ID of the account to which the IAM user belongs. username: name of the IAM user to be created. email: email address of the IAM user. **********: password of the IAM user. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
For details about how to obtain the project ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.
Verifying Permissions This section describes how to verify IAM user permissions. Sign in to the management console as an IAM user. Choose Enterprise > Project Management in the upper right corner of the page.
For IAM endpoints, see Regions and Endpoints. Debugging You can debug this API in API Explorer. URI DELETE /v3.0/OS-ROLE/roles/{role_id} Table 1 URI parameters Parameter Mandatory Type Description role_id Yes String Custom policy ID.
For IAM endpoints, see Regions and Endpoints. Debugging You can debug this API in API Explorer. URI DELETE /v3/OS-FEDERATION/identity_providers/{id} Table 1 URI parameters Parameter Mandatory Type Description id Yes String ID of the identity provider to be deleted.
In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be "Resource": {"uri": ["/iam/agencies/agencyTest"]}.
"Action": [ "hss:hosts:switchVersion", "hss:hosts:manualDetect", "hss:manualDetectStatus:get" ] } ] } Parent Topic: IAM
IAM Identity Center supports identity federation with Security Assertion Markup Language (SAML). IAM Identity Center adds SAML IdP capabilities to either your IAM Identity Center identity store or external identity provider (IdP) applications.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.
For details about how to obtain the account ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.
users: Creating a custom policy: iam:agencies:listAgencies iam:agencies:createAgency iam:permissions:listRolesForAgencyOnProject iam:permissions:grantRoleToGroupOnProject iam:roles:listRoles iam:roles:createRole Adding system role Security Administrator: Select a user group to which
Request Parameters Table 2 Parameters in the request header Parameter Mandatory Type Description X-Auth-Token Yes String Authenticated token with iam:permissions:listEnterpriseProjectsForGroup or Security Administrator permission.
Table 1 Service authorization Target Service Description IAM Permission Mandatory ModelArts Assign permissions to IAM users for using ModelArts.
The added IAM user is displayed in the user list. Figure 6 Viewing the added IAM user After the IAM user is added, log in to Huawei Cloud Astro Zero as the IAM user again. On Homepage, click Access Homepage. The application development page is displayed.
IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see the IAM Service Overview. Anti-DDoS Permissions By default, new IAM users do not have permissions assigned.
Live calls an IAM API to obtain a token and then use the token to authenticate the calling of Live APIs. For details about how to obtain a token, see Calling APIs. Parent topic: API Usage
Live calls an IAM API to obtain a token and then use the token to authenticate the calling of Live APIs. For details about how to obtain a token, see Calling APIs. Parent topic: API Usage
For details about how to obtain a user group ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.
One-click monitoring is only available to the enterprise project account or its IAM users with the Tenant Administrator permissions. For details about how to assign the Tenant Administrator permission to a user, see Creating a User Group and Assigning Permissions.
