检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. project_id Yes String Project ID of the delegating party.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. domain_id Yes String ID of the delegating account.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. project_id Yes String Project ID of the delegating party.
For IAM endpoints, see Regions and Endpoints. Debugging You can debug this API in API Explorer.
For IAM endpoints, see Regions and Endpoints. Debugging You can debug this API in API Explorer.
You need to map the federated users to IAM user groups. In this way, the federated users can obtain the permissions of the user groups to use Huawei Cloud resources. Ensure that user groups have been created.
Procedure Use the DomainA account to create an IAM user (for example, UserB) and add the user to GroupC by following the instructions in Adding Users to a User Group. Ensure that the IAM user can programmatically access Huawei Cloud services.
For details about how to obtain the account ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. group_id Yes String User group ID.
For details about how to obtain a user group ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. project_id Yes String Project ID.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. domain_id Yes String ID of the delegating account.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. project_id Yes String Project ID of the delegating party.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. domain_id Yes String ID of the delegating account.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. domain_id Yes String ID of the delegating account.
For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.
The username of the federated user in IAM is the first remote attribute value, that is, UserName. The federated user belongs to the admin group.
user test_user_name (the value of g:UserName), you are allowed to perform action iam:agencies:getAgency. { "Version": "1.1", "Statement": [{ "Effect": "Allow", "Action": [ "iam:agencies:getAgency" ], "Condition": { "StringEquals": { "g:UserName": [ "${g:UserName
IAM users can bind another virtual MFA device on the Security Settings page. For details, see How Do I Bind a Virtual MFA Device? Unbinding a Virtual MFA Device Log in to the management console.
For details about how to obtain the account ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. group_id Yes String User group ID.
If you are an IAM user, request the administrator to change your login verification mode to mobile number or email address, and then log in again.
For IAM endpoints, see Regions and Endpoints. Debugging You can debug this API in API Explorer.
