检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
AAD Permissions and Actions This section describes how to use IAM for fine-grained AAD permissions management. If your Huawei Cloud account does not need individual IAM users, skip this section. By default, new IAM users do not have permissions assigned.
Parent Topic: Using IAM to Grant Access to RDS
Parent Topic: Using IAM to Grant Access to RDS
The following is an example of a deny policy: { "Version": "1.1", "Statement": [ { "Effect": "Deny", "Action": [ "obs:object:PutObject" ] } ] } Parent Topic: Configuring IAM Permissions
This capability depends on the new IAM, requiring you to adopt the IAM 5.0 permission model. Exercise caution when selecting this capability.
How Do I Limit Specific Enterprise Projects to Different IAM Users? Background There are two IAM users, User B and User C, and two enterprise projects, EnterpriseProjectB and EnterpriseProjectC, in your account.
modify", "gaussdb:instance:delete", "vpc:publicIps:list", "vpc:publicIps:update" ], "Effect": "Allow" } ] } Parent Topic: Using IAM
After creating a user group on the IAM console, grant the custom policy created in 1 to the user group. Create a user on the IAM console and add the user to the group created in 3.
IAM is free of charge. You pay only for the resources in your account. For more information about IAM, see IAM Service Overview. Huawei HiLens Permissions By default, new IAM users do not have any permissions assigned.
How Do I Isolate IAM Users for Using Development Environments? There are two methods to prevent IAM users from viewing, modifying, or deleting notebook instances created by others: Solution 1: Delete the modelarts:notebook:listAllNotebooks permission.
On the IAM console, create a user group and attach the VPCEndpoint Administrator policy to the group. Create an IAM user and add it to the created user group. Create an IAM user and add it to the user group created in 1. Log in as the IAM user and verify permissions.
Parent topic: Calling APIs Through IAM Authentication
Why Can't an IAM User Log In to the VOD Console After Obtaining the VOD FullAccess Permission? The authorization is refined by role and policy. Therefore, an IAM user needs to obtain the system role permission before logging in to the VOD console.
Why Can't an IAM User Obtain Cluster or Fleet Information After Logging In to UCS? Symptom After an IAM user logs in to the UCS console and goes to the Fleets page, information about the created fleet and registered clusters cannot be obtained.
Parent Topic: Using IAM to Grant Access to RDS
Parent Topic: Using IAM to Grant Access to RDS
Parent topic: Using IAM to Grant Access to RDS for MariaDB
Parent Topic: Using IAM to Grant Access to RDS
Why Can't I Select a Specified IAM Project When Purchasing a DataArts Studio Instance? Check whether the current account has enabled the enterprise project function. The enterprise project and IAM project cannot be enabled at the same time.
"Action": [ "hss:hosts:switchVersion", "hss:hosts:manualDetect", "hss:manualDetectStatus:get" ] } ] } Parent Topic: Using IAM
