vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/iam/umn/iam_01_0024.html
Wei, Hongmin f37f5291ef IAM UMN 930 version 
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2023-02-02 16:20:41 +00:00

2.4 KiB
Raw Permalink Blame History

Permissions Management

You can grant users permissions to access different resources.

Granting Permissions to Users

Figure 1 Authorization model

  1. Plan user groups and grant permissions to each user group.
  2. Add a user to a specific user group so that the user can inherit the permissions of the group.

When personnel changes occur, you only need to change the user groups to which the users belong.

Granting Permissions to Other Accounts

You (account A) can grant permissions to another account (account B) by creating an agency. Account B can then grant the Agent Operator permissions to a user so that the user can manage resources in your account (account A).

Granting Permissions to Federated Users

You can federate external users to IAM and grant permissions to the users to access cloud resources by creating an identity provider and identity conversion rules.

Figure 2 Identity conversion of federated users
Parent topic: Service Overview