检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Identity Authentication and Access Control You can use Identity and Access Management (IAM) to control access to your Cloud Connect resources. IAM permissions define which actions on your cloud resources are allowed or denied.
Viewing Metrics Identity and Access Management (IAM) IAM allows you to control access to cloud connection resources.
Creating a User and Granting Permissions for Cloud Connections Use IAM to implement fine-grained permissions control for your Cloud Connect resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
To ensure account security, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created by an account in IAM to use cloud services. Each IAM user has its own identity credentials (password and access keys).
Creating a User and Granting Central Network Permissions Use IAM to implement fine-grained permissions control for your Cloud Connect resources. With IAM, you can: Create IAM users for personnel based on your enterprise's organizational structure.
IAM is a global service. You can create an IAM user using the endpoint of IAM in any region.
Skip this part if you do not require individual IAM users for refined permissions management. IAM is a free service. For more information about IAM, see the IAM Service Overview. Cloud Connect Permissions By default, new IAM users do not have permissions assigned.
IAM or enterprise projects: type of projects for which an action will take effect. Policies that contain actions for both IAM and enterprise projects can be used and take effect for both IAM and Enterprise Management.
If the permissions granted to an IAM user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions.
If the permissions granted to an IAM user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions.
Introduction You can use Identity and Access Management (IAM) for fine-grained permissions management of your Cloud Connect resources. If your HUAWEI ID does not need individual IAM users, you can skip this topic. With IAM, you can control access to specific cloud resources.
{Endpoint} is the IAM endpoint and can be obtained from Regions and Endpoints. For details about API authentication, see Authentication. The following is an example response.
The following shows part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
name "password": $ADMIN_PASS, //IAM user password.
Figure 9 Manage User Select the IAM user you want to add to the user group and click OK.
