检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
It can be obtained by calling an IAM API. The value of X-Subject-Token in the response header is the user token.
Policies that contain actions for both IAM and enterprise projects can be used and applied for both IAM and Enterprise Management. Policies that contain actions only for IAM projects can be used and applied to IAM only.
The following shows part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
name "password": $ADMIN_PASS, //IAM user password.
For security purposes, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created by an account in IAM to use cloud services. Each IAM user has its own identity credentials (password and access keys).
Permissions You can use Identity and Access Management (IAM) for fine-grained permissions control for your SMN resources. With IAM, you can: Create IAM users for personnel based on your enterprise's organizational structure.
For details about the relationship between IAM identities and operators and the operator username format, see Relationship Between IAM Identities and Operators.
Message Publishing Permission API Action IAM Project Enterprise Project Publishing a message POST /v2/{project_id}/notifications/topics/{topic_urn}/publish smn:topic:publish √ × Parent Topic: Permissions Policies and Supported Actions
Sending an Application Message (Deprecated) Permission API Action IAM Project Enterprise Project Sending an application message POST /v2/{project_id}/notifications/endpoints/{endpoint_urn}/publish smn:application:publish √ √ Parent Topic: Permissions Policies and Supported Actions
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Topic Operations Permission API Action IAM Project Enterprise Project Creating a topic POST /v2/{project_id}/notifications/topics smn:topic:create √ √ Querying a topic GET /v2/{project_id}/notifications/topics smn:topic:list √ √ Updating a topic PUT /v2/{project_id}/notifications/
Template Operations Permission API Action IAM Project Enterprise Project Creating a message template POST /v2/{project_id}/notifications/message_template smn:template:create √ × Querying a message template GET /v2/{project_id}/notifications/message_template smn:template:list √ × Modifying
Tag Operations Permission API Action IAM Project Enterprise Project Adding a resource tag POST /v2/{project_id}/{resource_type}/{resource_id}/tags smn:tag:create √ √ Updating a tag N/A smn:tag:update √ √ Deleting a resource tag DELETE /v2/{project_id}/{resource_type}/{resource_id}
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Application Operations (Deprecated) Permission API Action IAM Project Enterprise Project Creating a platform application POST /v2/{project_id}/notifications/applications smn:application:create √ √ Querying platform applications GET /v2/{project_id}/notifications/applications?
It can be obtained by calling an IAM API. The value of X-Subject-Token in the response header is the user token.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
It can be obtained by calling an IAM API. The value of X-Subject-Token in the response header is the user token.
It can be obtained by calling an IAM API. The value of X-Subject-Token in the response header is the user token.
{Endpoint} is the IAM endpoint and can be obtained from Regions and Endpoints. For details about API authentication, see Authentication. The following is an example response.
