检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Cloud Service Permissions With IAM, you can control resource access for users and user groups based on enterprise projects. For details about cloud services supported by EPS, see Supported Cloud Services.
You can search for cbc_customerorgagent on the Identity and Access Management (IAM) console. If the agency is displayed, go to 2. If there is no data available, the agency has been deleted.
FAQs What Are the Differences Between IAM and Enterprise Management? What Are the Differences Between IAM Projects and Enterprise Projects? What Are the Differences Between IAM Users and Enterprise Member Accounts? How Can I View All Enterprise Projects?
IAM: An IAM project can contain resources of only one region, and resources in different IAM projects are physically isolated. In conclusion, EPS is more flexible than IAM. It is recommended that the company use enterprise projects to manage resources.
Step 2: On the IAM console, create users and user groups and add users to user groups. Step 3: On the IAM console, authorize the user groups to manage related enterprise projects.
For details about permissions, roles, and policies, see IAM User Guide. IAM provides administrator permissions and read-only permissions for each cloud service. You can assign the permissions to user groups.
Getting Started Overview Creating a User Group Creating an IAM User Adding an IAM User to a User Group Creating an Enterprise Project Authorizing a User Group to Manage an Enterprise Project Adding Resources to Enterprise Projects Verifying Permissions Parent topic: Project Management
Common Issues What Are the Differences Between IAM Users and Enterprise Member Accounts? What Should I Do If the Organization and Account Information Is Unavailable to an IAM User? What Requirements Must an Account Meet to Function as a Master Account?
The following shows part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
Enterprise projects are different from IAM projects. For more information, see What Are the Differences Between IAM Projects and Enterprise Projects? Parent topic: Managing Resources in an Enterprise Project
For security purposes, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created by an account in IAM to use cloud services. Each IAM user has its own identity credentials (password and access keys).
The IAM Users page is displayed. Select a user and authorize the user to manage the enterprise project. For details, see Assigning Permissions to an IAM User. Figure 2 User Authorization Other Operations Users inherit permissions from their user groups.
user name "password": "********", // IAM user password "domain": { "name": "domainname" // Name of an IAM account } } } }, "scope": { "domain
Appendix Status Code Error Codes Obtaining a Project ID Obtaining the Domain-Level Token IAM Error Codes
The IAM User Groups page is displayed. Select a user group and authorize the user group to manage the enterprise project. For details, see Creating a User Group and Assigning Permissions. Figure 2 Authorize User Group Parent topic: Getting Started
On the IAM Authorization page that is displayed, click By Enterprise Project to view authorization records of each enterprise project. Click the user or user group name in the Principal column to view details about a user or user group.
The IAM User Groups page is displayed. Select a user group and authorize the user group to manage the enterprise project. For details, see Creating a User Group and Assigning Permissions. Figure 2 Authorize User Group Parent topic: Managing User Groups in an Enterprise Project
Figure 2 Authorize User Group On the IAM User Groups page that is displayed, click the user group name to go to the user group details page. On the Permissions tab, click By Enterprise Project, select the target enterprise project, and click Delete in the Operation column.
Enterprise Project Management API Permissions Table 1 Supported Actions Permission API Action IAM Project (Project) Enterprise Project (Enterprise Project) Querying enterprise projects GET /v1.0/enterprise-projects eps:enterpriseProjects:list √ √ Creating an enterprise project POST
Figure 2 User Authorization On the IAM Users page that is displayed, click the user name to go to the user details page. On the Permissions tab, click By Enterprise Project, select the target enterprise project, and click Delete in the Operation column.
