检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
All IAM APIs support HTTPS to encrypt data during transmission. Parent topic: Data Protection
IAM User Management Why Does IAM User Login Fail? How Do I Allow IAM Users to Access the Console from Specific IP Addresses?
an IAM User Managing Permissions Assigned to IAM Users Deleting IAM Users
IAM User Management Listing IAM Users Querying IAM User Details (Recommended) Querying IAM User Details Querying the User Groups Which an IAM User Belongs to Querying the IAM Users in a Group Creating an IAM User (Recommended) Creating an IAM User Changing the Login Password Modifying
Logging In to Huawei Cloud as an IAM User To log in as an IAM user, you can choose IAM User on the login page or obtain the IAM user login link from the administrator.
Modifying IAM User Information (By an IAM User) (Recommended) Function This API can be used by an IAM user to modify its basic information. The API can be called using either a global endpoint or a region-specific endpoint. For IAM endpoints, see Regions and Endpoints.
Table 5 users Parameter Type Description name String IAM username. links Object IAM user resource link information. domain_id String ID of the account used to create the IAM user. enabled Boolean Enabling status of the IAM user. true (default value) indicates that the user is enabled
Security Auditing on Permissions of IAM Users Scenario Enterprise users usually need to periodically audit the permissions of IAM users created in the public cloud, ensuring that IAM users only have the permissions required to complete certain tasks.
Creating an IAM User and Logging In Scenarios The account created in the previous section can be used to create an IAM user and add the IAM user to the developer user group. The IAM user has their own username and password.
Table 5 users Parameter Type Description name String IAM username. links Object IAM user resource link information. domain_id String ID of the account used to create the IAM user. enabled Boolean Enabling status of the IAM user. true (default value) indicates that the user is enabled
Adding IAM Users to or Removing IAM Users from a User Group A user inherits permissions from the groups which the user belongs to. To change the permissions of a user, add the user to a new group or remove the user from an existing group.
To disable an individual IAM user, see Modifying Basic Information About an Individual IAM User. To disable multiple IAM users at a time, see Batch Modifying IAM User Information.
Solution To assign permissions to an IAM user for accessing and performing operations on the IAM console, create a user group, assign IAM permissions to the group, and add the IAM user to the group.
Figure 1 Going to the IAM user security settings page View the basic information about the IAM user. Modifying Basic Information About an Individual IAM User Log in to the IAM console as the administrator.
Access Methods You can access IAM using either of the following methods: Management console Access IAM through the management console ─ a browser-based visual interface. For details, see Accessing the IAM Console. REST APIs Access IAM using REST APIs in a programmable way.
Table 4 user Parameter Type Description name String IAM username. links Object IAM user resource link information. domain_id String ID of the account used to create the IAM user. enabled Boolean Enabling status of the IAM user. true (default value) indicates that the user is enabled
Parent topic: IAM User Management
For IAM endpoints, see Regions and Endpoints. Restrictions When you use this API to create an IAM user, you cannot specify a mobile number or email address for the IAM user.
For details, see Assigning Permissions to an IAM User. Accounts and IAM users use different methods to log in. For details about IAM user login, see Logging In to Huawei Cloud as an IAM User. Parent topic: IAM User Management
Assigning Permissions to an IAM User IAM users created without being added to any groups do not have any permissions. The administrator can assign permissions to these IAM users on the IAM console. IAM users can also assign permissions to themselves.
