检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the following required identity policy-based permissions. For details about the required permissions, see Permissions Policies and Supported Actions.
If the authorization scope is set to IAM projects only, the custom policy will take effect only for user groups in IAM projects.
The following shows part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
Enterprise Router works with Identity and Access Management (IAM) to support four identity authentication methods: username and password, access key, temporary access key, and access code. IAM also provides Login Protection and Login Authentication Policy.
To ensure account security, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created by an account in IAM to use cloud services. Each IAM user has its own identity credentials (password and access keys).
Identity and Access Management (IAM) You can use IAM to assign different permissions to different users to control their access to enterprise router resources.
name "password": "********", // IAM user password "domain": { "name": "domainname" // Name of the account that the IAM user belongs to } } } }, "scope"
Quota Management Permission API Action IAM Project Enterprise Project Querying quotas GET /v3/{project_id}/enterprise-router/quotas er:quotas:list √ × Parent topic: Permissions Policies and Supported Actions
Associations Permission API Action IAM Project Enterprise Project Creating an association POST /v3/{project_id}/enterprise-router/{er_id}/route-tables/{route_table_id}/associate er:associations:associate √ √ Querying the association list GET /v3/{project_id}/enterprise-router/{er_id
Propagations Permission API Action IAM Project Enterprise Project Creating a propagation POST /v3/{project_id}/enterprise-router/{er_id}/route-tables/{route_table_id}/enable-propagations er:propagations:enable √ √ Querying the propagation list GET /v3/{project_id}/enterprise-router
Enterprise Routers Permission API Action IAM Project Enterprise Project Creating an enterprise router POST /v3/{project_id}/enterprise-router/instances er:instances:create √ √ Updating an enterprise router PUT /v3/{project_id}/enterprise-router/instances/{enterprise_router_id} er:
VPC Attachments Permission API Action IAM Project Enterprise Project Creating a VPC attachment POST /v3/{project_id}/enterprise-router/{er_id}/vpc-attachments er:attachments:create √ √ Updating a VPC attachment PUT /v3/{project_id}/enterprise-router/{er_id}/vpc-attachments/{vpc_attachment_id
Other Types of Attachments Permission API Action IAM Project Enterprise Project Updating an attachment PUT /v3/{project_id}/enterprise-router/{er_id}/attachments/{attachment_id} er:attachments:update √ √ Querying details about an attachment GET /v3/{project_id}/enterprise-router/{
