检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Using IAM to Grant Access to AOM Creating a User and Granting Permissions Creating a Custom Policy
What Are the Differences Between IAM Projects and Enterprise Projects? IAM Projects IAM projects can group and physically isolate resources. Resources cannot be transferred between IAM projects, but can only be deleted and then created or purchased again.
What Are the Differences Between IAM Projects and Enterprise Projects? IAM Projects An IAM project can contain resources of only one region. You cannot transfer resources between IAM projects. Enterprise Projects An enterprise project can contain resources of different regions.
ALM-45743 Failed to Call the IAM API This section applies only to MRS 3.1.5 or later. Alarm Description This alarm is generated when Guardian fails to call the IAM API to obtain a temporary AK/SK.
DAS allows you to control whether IAM users can add, delete, and modify data connections and log in to an instance. For details, see Custom Permissions Policies. After a user logs in to the database, IAM cannot interfere with the user to run SQL commands.
Can I Enable IoTDA for IAM Users or Sub-Projects? 1. You can enable IoTDA as an IAM user. However, the enabled IoTDA service belongs to the IAM master account. That is, the master account is the payment entity. 2. IoTDA cannot be enabled for sub-projects created using IAM.
In IAM user SSO, the IdP user has a IAM user mapped by external identity ID on the IAM console. 3. Permissions assignment in IAM: In virtual user SSO, the permissions of the IdP user are defined by the identity conversion rule.
Listing Allocated, Inactive, and All IAM Users Function This API is used to list allocated, inactive, and all IAM users. URI GET /v1/{project_id}/quota-users/all Table 1 URI parameter Parameter Mandatory Type Description project_id Yes String Project ID.
Granting IAM User Groups Basic Permissions for All OBS Resources Scenario This topic describes how to use the OBS-related system roles and policies preset in IAM to grant basic operation permissions for all OBS resources to multiple IAM users or user groups.
Viewing the Notebook Instances of All IAM Users Under One Tenant Account Any IAM user granted with the listAllNotebooks and listUsers permissions can click View all on the notebook page to view the instances of all IAM users in the current IAM project.
With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing DataArts Studio resources.
Querying the Enterprise Projects Directly Associated with an IAM User Function This API is used to query the enterprise projects directly associated with an IAM user. The API can be called using both the global endpoint and region-specific endpoints.
For details about how to obtain a user group ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information. user_id Yes String IAM user ID.
Ingesting Logs to LTS Across IAM Accounts If you choose Cross-Account Ingestion - Log Stream Mapping as the log ingestion type, you can create an agency to map the log stream of the delegator account to that of the delegated account.
Why Cannot IAM Users Configure Image Synchronization? Currently, only accounts and IAM users with administrator permissions can configure image synchronization. Parent topic: Synchronizing Images
Can IAM Users Use the Message & SMS Service? IAM users can use the Message & SMS service. However, an IAM user can use the service only when the following conditions are met: The Message & SMS service is enabled for a Huawei Cloud enterprise account.
With IAM, you can: Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing DMS for Kafka resources.
With IAM, you can: Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing DMS for RocketMQ resources.
Assigning SFS Turbo Folder-Level Access Permissions to an IAM User Scenario Grant access permission of specific SFS Turbo folders to IAM users. Granting the IAM user the SFS Turbo folder-level access permission is a whitelist function.
Create a user group on the IAM console, assign the Workspace Administrator permission to the group, and select the authorization scope. Create a user and add them to the user group. Create a user on the IAM console and add the user to the group created in 1.
