forked from docs/doc-exports
zhangyue
7492b7b30f
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: zhangyue <zhangyue164@huawei.com> Co-committed-by: zhangyue <zhangyue164@huawei.com>
52 lines
7.2 KiB
HTML
52 lines
7.2 KiB
HTML
<a name="obs_03_0122"></a><a name="obs_03_0122"></a>
|
|
|
|
<h1 class="topictitle1">Creating a User and Granting OBS Permissions</h1>
|
|
<div id="body1558061572625"><div class="section" id="obs_03_0122__section35143124418"><h4 class="sectiontitle">Process</h4><div class="fignone" id="obs_03_0122__fig292324264713"><span class="figcap"><b>Figure 1 </b>Process of granting an IAM user the OBS permissions</span><br><span><img id="obs_03_0122__image12924124212474" src="en-us_image_0170301902.png"></span></div>
|
|
</div>
|
|
<div class="section" id="obs_03_0122__section2074420567337"><h4 class="sectiontitle">Procedure</h4><ol id="obs_03_0122__ol63831030102"><li id="obs_03_0122__li35354147174321"><span>Log in to the management console using a cloud service account.</span></li><li id="obs_03_0122__li5853192561010"><span>On the top navigation menu, choose <strong id="obs_03_0122__b19603113671814">Service List</strong> > <strong id="obs_03_0122__b3603103615186">Management & Deployment</strong> > <strong id="obs_03_0122__b460310368184">Identity and Access Management</strong>. The IAM console page is displayed.</span></li><li id="obs_03_0122__li257313485116"><span>Create a user group and grant the OBS permissions to the user group.</span><p><div class="p" id="obs_03_0122__p371751915195">User groups facilitate centralized user management and streamlined permissions management. Users in the same user group have the same permissions. Users created in IAM inherit permissions from the groups to which they belong.<ol type="a" id="obs_03_0122__ol28671118201912"><li id="obs_03_0122__li78661718151913">In the navigation pane on the left, click <strong id="obs_03_0122__b17624165682216">User Groups</strong>. The <strong id="obs_03_0122__b4625115617224">User Groups</strong> page is displayed.</li><li id="obs_03_0122__li286617189195">Click <span class="uicontrol" id="obs_03_0122__uicontrol230942777211457"><b>Create User Group</b></span>.</li><li id="obs_03_0122__li1886641801917">On the <strong id="obs_03_0122__b1190011522266">Create User Group</strong> page, enter a name for the user group and click <strong id="obs_03_0122__b7542112222713">OK</strong>.<p id="obs_03_0122__p3866171841910">The user group is displayed in the user group list once the creation completes.</p>
|
|
</li><li id="obs_03_0122__li19866191819199">Click <strong id="obs_03_0122__b1406172416567">Modify</strong> in the <strong id="obs_03_0122__b12813112718562">Operation</strong> column of the row where the created user group resides.</li><li id="obs_03_0122__li1286721818193">In the <strong id="obs_03_0122__b1813981018595">Group Permissions</strong> area, locate <strong id="obs_03_0122__b166361281309">OBS (S3)</strong>, click <strong id="obs_03_0122__b145811817302">Attach Policy</strong> in the <strong id="obs_03_0122__b151884218015">Operation</strong> column, select the policy name, and click <strong id="obs_03_0122__b112537337019">OK</strong>.<div class="note" id="obs_03_0122__note12867161811198"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="obs_03_0122__p128671018121916">In the <strong id="obs_03_0122__b1318212383618">Policy Information</strong> area, you can view the details about the policy.</p>
|
|
</div></div>
|
|
</li></ol>
|
|
</div>
|
|
</p></li><li id="obs_03_0122__li17712194912"><span>Create a user.</span><p><ol type="a" id="obs_03_0122__ol6893174016015"><li id="obs_03_0122__li84578140715">In the navigation pane on the left, click <strong id="obs_03_0122__b332175483617">Users</strong>. The <strong id="obs_03_0122__b832320546366">Users</strong> page is displayed.</li><li id="obs_03_0122__li75875232719">Click <strong id="obs_03_0122__b16239139183714">Create User</strong>.</li><li id="obs_03_0122__li08941740305">Set user information and click <strong id="obs_03_0122__b897712100378">Next</strong>.
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_03_0122__table127131345071" frame="border" border="1" rules="all"><caption><b>Table 1 </b>User parameters</caption><thead align="left"><tr id="obs_03_0122__row4714144517714"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.2.2.4.2.1.3.2.2.3.1.1"><p id="obs_03_0122__p137145451578">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.2.2.4.2.1.3.2.2.3.1.2"><p id="obs_03_0122__p1071417451679">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="obs_03_0122__row157141451376"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.1 "><p id="obs_03_0122__p1971404515717">Username</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.2 "><p id="obs_03_0122__p1871494519719">The user name for logging in to the cloud service.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0122__row37141245171"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.1 "><p id="obs_03_0122__p3714645874">Credential Type</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.2 "><div class="p" id="obs_03_0122__p1652150296">A credential refers to the identity credential used for user system authentication. In this example, password is selected.<ul id="obs_03_0122__ul194541357781"><li id="obs_03_0122__li1545412571989"><strong id="obs_03_0122__b293243261112">Password</strong>: Used for accessing cloud services using the console or development tools.</li><li id="obs_03_0122__li1945475715812"><strong id="obs_03_0122__b4990439141110">Access key</strong>: Used for logging to the cloud service using development tools. This credential type is more secure, and is recommended if the user does not need to use the console.</li></ul>
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0122__row67141445471"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.1 "><p id="obs_03_0122__p167148452713">User Groups</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.2 "><p id="obs_03_0122__p1471412456719">You can add a user to one or more user groups. Then the user will inherit the permissions granted to these user groups. The default user group <strong id="obs_03_0122__b181532620463">admin</strong> has the administrator permissions and all of the permissions required to use all cloud resources.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0122__row16714184512714"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.1 "><p id="obs_03_0122__p142481183015">Description</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.2.4.2.1.3.2.2.3.1.2 "><p id="obs_03_0122__p167144453719">(Optional) Brief description about the user.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</li><li id="obs_03_0122__li1878212359116">Select a type for password generation, set the email address and mobile number, and click <strong id="obs_03_0122__b12462145916241">OK</strong>.</li></ol>
|
|
</p></li><li id="obs_03_0122__li193181327107"><span>Use the created IAM user to log in to OBS Console and verify the user permissions.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0144.html">Configuring IAM Policies</a></div>
|
|
</div>
|
|
</div>
|
|
|