forked from docs/doc-exports
Chen, Junjie
dac566cf2f
Reviewed-by: Eotvos, Oliver <oliver.eotvos@t-systems.com> Co-authored-by: Chen, Junjie <chenjunjie@huawei.com> Co-committed-by: Chen, Junjie <chenjunjie@huawei.com>
26 lines
5.9 KiB
HTML
26 lines
5.9 KiB
HTML
<a name="functiongraph_01_0141"></a><a name="functiongraph_01_0141"></a>
|
|
|
|
<h1 class="topictitle1">Creating a User and Granting Permissions</h1>
|
|
<div id="body32001227"><p id="functiongraph_01_0141__en-us_topic_0000001252067212_p1248413321918"></p>
|
|
<p id="functiongraph_01_0141__en-us_topic_0000001252067212_p37090419396">This section describes how to use Identity and Access Management (IAM) to implement fine-grained permissions control for your FunctionGraph resources. With IAM, you can:</p>
|
|
<ul id="functiongraph_01_0141__en-us_topic_0000001252067212_ul147108420392"><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li3710194113920">Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials for accessing FunctionGraph resources.</li><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li1571013413918">Grant only the permissions required for users to perform a task.</li><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li1371044133918">Entrust other accounts or cloud services to perform professional and efficient O&M on your FunctionGraph resources.</li></ul>
|
|
<p id="functiongraph_01_0141__en-us_topic_0000001252067212_p67101416398">If your account does not need individual IAM users, then you may skip over this chapter.</p>
|
|
<p id="functiongraph_01_0141__en-us_topic_0000001252067212_p1771020433917">This section describes the procedure for granting permissions. For details, see <a href="#functiongraph_01_0141__en-us_topic_0000001252067212_fig484754213103">Figure 1</a>.</p>
|
|
<div class="section" id="functiongraph_01_0141__en-us_topic_0000001252067212_section0172163995812"><h4 class="sectiontitle">Prerequisites</h4><p id="functiongraph_01_0141__en-us_topic_0000001252067212_p2299123913205">Before assigning permissions to user groups, you should learn about the system permissions listed in "Permissions Management" in the <em id="functiongraph_01_0141__en-us_topic_0000001252067212_i152941353163720">FunctionGraph Service Overview</em>. For the system policies of other services, see section "Permissions".</p>
|
|
</div>
|
|
<div class="section" id="functiongraph_01_0141__en-us_topic_0000001252067212_section73381480"><h4 class="sectiontitle">Process</h4><div class="fignone" id="functiongraph_01_0141__en-us_topic_0000001252067212_fig484754213103"><a name="functiongraph_01_0141__en-us_topic_0000001252067212_fig484754213103"></a><a name="en-us_topic_0000001252067212_fig484754213103"></a><span class="figcap"><b>Figure 1 </b>Process for granting FunctionGraph permissions</span><br><span><img id="functiongraph_01_0141__en-us_topic_0000001252067212_image10847342101012" src="en-us_image_0000001252067292.png"></span></div>
|
|
<p id="functiongraph_01_0141__en-us_topic_0000001252067212_p1137788485"></p>
|
|
<ol id="functiongraph_01_0141__en-us_topic_0000001252067212_ol413758114819"><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li1113720874811"><a name="functiongraph_01_0141__en-us_topic_0000001252067212_li1113720874811"></a><a name="en-us_topic_0000001252067212_li1113720874811"></a>.<p id="functiongraph_01_0141__en-us_topic_0000001252067212_p1872310325499"><a name="functiongraph_01_0141__en-us_topic_0000001252067212_li1113720874811"></a><a name="en-us_topic_0000001252067212_li1113720874811"></a>Create a user group on the IAM console, and assign the <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b1257191511155">FunctionGraph Invoker</strong> role to the group.</p>
|
|
</li><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li191371587484">.<p id="functiongraph_01_0141__en-us_topic_0000001252067212_p713713874819"><a name="functiongraph_01_0141__en-us_topic_0000001252067212_li191371587484"></a><a name="en-us_topic_0000001252067212_li191371587484"></a>Create a user on the IAM console and add the user to the group created in <a href="#functiongraph_01_0141__en-us_topic_0000001252067212_li1113720874811">1</a>.</p>
|
|
</li><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li31376844817"> and Verifying Permissions<p id="functiongraph_01_0141__en-us_topic_0000001252067212_p1713720813485"><a name="functiongraph_01_0141__en-us_topic_0000001252067212_li31376844817"></a><a name="en-us_topic_0000001252067212_li31376844817"></a>Log in to the management console as the created user and check whether this user only has read permissions for FunctionGraph:</p>
|
|
<ul id="functiongraph_01_0141__en-us_topic_0000001252067212_ul6125199312"><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li14125993111">Choose <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b17721520111012">Service List</strong> > <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b995616173106">FunctionGraph</strong> to access the FunctionGraph console. In the navigation pane, choose <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b34788141476">Functions</strong> > <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b4519121264711">Function List</strong>. Then click <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b174351191128">Create Function</strong>. If a message appears indicating insufficient permissions to perform the operation, the <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b46218342042">FunctionGraph Invoker</strong> role has already taken effect.</li><li id="functiongraph_01_0141__en-us_topic_0000001252067212_li122486111811">Choose any other service in the <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b4822124113128">Service List</strong>. If a message appears indicating insufficient permissions to access the service, the <strong id="functiongraph_01_0141__en-us_topic_0000001252067212_b1682715425154">FunctionGraph Invoker</strong> role has already taken effect.</li></ul>
|
|
</li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="functiongraph_01_0140.html">Permissions Management</a></div>
|
|
</div>
|
|
</div>
|
|
|