检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
Authorization Information Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.
In addition to assigning permissions to users in IAM, the administrator can add, modify, and delete permissions for IAM users on the image details page of the SWR console.
For more information, see: Public Network Access Private Network Access Constraints To obtain the subnet list of a VPC, IAM users must have the VPC ReadOnlyAccess permission. Use your account to log in to IAM and grant this permission to IAM users. Parent topic: Access Control
With IAM, you can create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own identity credentials for accessing SWR resources. You can grant only the permissions required for users to perform a specific task.
On the details page of the organization, grant the IAM user the permission to manage this organization. For details, see User Permissions. Method 2: Use IAM fine-grained authorization to assign a custom policy to this IAM user. This policy contains the permission to push images.
On the displayed API Credentials page, view the IAM username and IAM user ID. Figure 1 API credentials Parent topic: Appendixes
On the displayed API Credentials page, view the IAM username and IAM user ID. Figure 1 API credentials Parent Topic: Appendixes
Solutions On either the SWR or IAM console, grant the required permission to the IAM user you are using. Method 1: Log in to the SWR console as an SWR administrator. In the organization list, locate the organization.
Function Description Phase Documentation 1 IAM fine-grained authorization IAM fine-grained permission control was supported. You can flexibly assign different permissions to IAM users and user groups in your account.
Strengthening Permissions Management to Reduce Related Risks Do not allow IAM users to access SWR using administrator permissions. Create Huawei Cloud IAM users and grant them access permissions on different container images to isolate permissions between employees.
