doc-exports/docs/iam/umn/iam_07_0002.html
Wei, Hongmin 25e8bdf969 IAM UMN 0815 Version
Reviewed-by: Belejkanic, Lukas <lukas.belejkanic@t-systems.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2023-08-21 13:27:54 +00:00

96 lines
9.5 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<a name="iam_07_0002"></a><a name="iam_07_0002"></a>
<h1 class="topictitle1">Creating a Security Administrator</h1>
<div id="body1504584234105"><p id="iam_07_0002__p50509901184229">For security purposes, create a security administrator and manage users in your account as the security administrator.</p>
<div class="section" id="iam_07_0002__section1640244412315"><h4 class="sectiontitle">Procedure</h4><ol id="iam_07_0002__en-us_topic_0046611303_ol47528147"><li id="iam_07_0002__li24111249193037"><span>Choose <span class="menucascade" id="iam_07_0002__menucascade157465065015936"><b><span class="uicontrol" id="iam_07_0002__uicontrol28297739115936">Management &amp; Deployment</span></b> &gt; <b><span class="uicontrol" id="iam_07_0002__uicontrol34212982515942">Identity and Access Management</span></b></span>.</span></li><li id="iam_07_0002__en-us_topic_0046611303_li24574685"><span>In the navigation pane, choose <strong id="iam_07_0002__en-us_topic_0046611303_b1990470763143655">Users</strong>.</span></li><li id="iam_07_0002__en-us_topic_0046611303_li19845579"><span>On the <strong id="iam_07_0002__en-us_topic_0046611303_b499116851143650">Users</strong> page, click <strong id="iam_07_0002__en-us_topic_0046611303_b64132446143650">Create User</strong>.</span></li><li id="iam_07_0002__li71951912117"><span>Specify the user information on the <strong id="iam_07_0002__b1228317171101">Create User</strong> page.</span><p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_07_0002__table2085713152213" frame="border" border="1" rules="all"><thead align="left"><tr id="iam_07_0002__row1585971132215"><th align="left" class="cellrowborder" valign="top" width="7.870000000000001%" id="mcps1.3.2.2.4.2.1.1.3.1.1"><p id="iam_07_0002__p49241120132516">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="92.13%" id="mcps1.3.2.2.4.2.1.1.3.1.2"><p id="iam_07_0002__p1490342011259">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_07_0002__row148161516192520"><td class="cellrowborder" valign="top" width="7.870000000000001%" headers="mcps1.3.2.2.4.2.1.1.3.1.1 "><p id="iam_07_0002__p1185913111223"><span class="keyword" id="iam_07_0002__keyword1774611423011">Username</span></p>
</td>
<td class="cellrowborder" valign="top" width="92.13%" headers="mcps1.3.2.2.4.2.1.1.3.1.2 "><p id="iam_07_0002__p25391318243">Username that will be used to log in to the cloud platform, for example, <strong id="iam_07_0002__b012202716555">Franklin</strong>. This field is required.</p>
</td>
</tr>
<tr id="iam_07_0002__row138598110225"><td class="cellrowborder" valign="top" width="7.870000000000001%" headers="mcps1.3.2.2.4.2.1.1.3.1.1 "><p id="iam_07_0002__p1185911132218">Email Address</p>
</td>
<td class="cellrowborder" valign="top" width="92.13%" headers="mcps1.3.2.2.4.2.1.1.3.1.2 "><p id="iam_07_0002__p1085915132215">Email address of the user that can be used as a login credential. Users can bind an email address after they are created. This field is required if you have specified <strong id="iam_07_0002__b938705481014">Set by user</strong> as the access type.</p>
</td>
</tr>
<tr id="iam_07_0002__row58605162217"><td class="cellrowborder" valign="top" width="7.870000000000001%" headers="mcps1.3.2.2.4.2.1.1.3.1.1 "><p id="iam_07_0002__p178600116224">Mobile Number</p>
</td>
<td class="cellrowborder" valign="top" width="92.13%" headers="mcps1.3.2.2.4.2.1.1.3.1.2 "><p id="iam_07_0002__p386020114221">Mobile phone number of the user that can be used as a login credential. Users can bind a mobile number after they are created. This field is optional.</p>
</td>
</tr>
<tr id="iam_07_0002__row7386153642217"><td class="cellrowborder" valign="top" width="7.870000000000001%" headers="mcps1.3.2.2.4.2.1.1.3.1.1 "><p id="iam_07_0002__p63874367227">Description</p>
</td>
<td class="cellrowborder" valign="top" width="92.13%" headers="mcps1.3.2.2.4.2.1.1.3.1.2 "><p id="iam_07_0002__p17387193652218">Additional information about the user. This field is optional.</p>
</td>
</tr>
<tr id="iam_07_0002__row9599441128"><td class="cellrowborder" valign="top" width="7.870000000000001%" headers="mcps1.3.2.2.4.2.1.1.3.1.1 "><p id="iam_07_0002__p134221241605">External Identity ID</p>
</td>
<td class="cellrowborder" valign="top" width="92.13%" headers="mcps1.3.2.2.4.2.1.1.3.1.2 "><p id="iam_07_0002__p5304118115910">Identity of an enterprise user in IAM user SSO.</p>
<p id="iam_07_0002__p6241633122718">This parameter (no more than 128 characters) is mandatory for IAM user SSO. For details, see <a href="iam_08_0253.html">IAM User SSO via SAML</a></p>
</td>
</tr>
</tbody>
</table>
</div>
</p></li><li id="iam_07_0002__li199522021572"><span>Specify the access type as <strong id="iam_07_0002__b980914558410">Management console access</strong> and click <strong id="iam_07_0002__b153501257645">Next</strong>.</span><p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_07_0002__table9113950172113" frame="border" border="1" rules="all"><thead align="left"><tr id="iam_07_0002__row51139501217"><th align="left" class="cellrowborder" valign="top" id="mcps1.3.2.2.5.2.1.1.5.1.1"><p id="iam_07_0002__p1811335010219">Access Type</p>
</th>
<th align="left" class="cellrowborder" colspan="2" valign="top" id="mcps1.3.2.2.5.2.1.1.5.1.2"><p id="iam_07_0002__p51132050172117">Configuration</p>
</th>
<th align="left" class="cellrowborder" valign="top" id="mcps1.3.2.2.5.2.1.1.5.1.3"><p id="iam_07_0002__p11131550202116">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_07_0002__row101131650142112"><td class="cellrowborder" rowspan="5" valign="top" width="16.03839616038396%" headers="mcps1.3.2.2.5.2.1.1.5.1.1 "><p id="iam_07_0002__p111131950122119">Management console access</p>
</td>
<td class="cellrowborder" rowspan="3" valign="top" width="11.848815118488151%" headers="mcps1.3.2.2.5.2.1.1.5.1.2 "><p id="iam_07_0002__p41134506219">Console Password</p>
</td>
<td class="cellrowborder" valign="top" width="12.248775122487752%" headers="mcps1.3.2.2.5.2.1.1.5.1.2 "><p id="iam_07_0002__p711317509214">Set by user</p>
</td>
<td class="cellrowborder" valign="top" width="59.86401359864014%" headers="mcps1.3.2.2.5.2.1.1.5.1.3 "><p id="iam_07_0002__p027123518241">If you are the administrator setting the password for user <strong id="iam_07_0002__b1563123210551">Franklin</strong>, select this option and enter an email address and a mobile number. User <strong id="iam_07_0002__b135632325555">Franklin</strong> can then set a password by clicking the one-time login URL sent over email.</p>
</td>
</tr>
<tr id="iam_07_0002__row11113195042120"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.1 "><p id="iam_07_0002__p711375015214">Automatically generated</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.2 "><p id="iam_07_0002__p1113195042120">This option is available only when you create a single user.</p>
</td>
</tr>
<tr id="iam_07_0002__row1011335017215"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.1 "><p id="iam_07_0002__p15113165042114">Set now</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.2 "><p id="iam_07_0002__p115312242249">Select this option if you are user <strong id="iam_07_0002__b16539124665512">Franklin</strong>. Then, set a password for login.</p>
</td>
</tr>
<tr id="iam_07_0002__row111311500218"><td class="cellrowborder" rowspan="2" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.1 "><p id="iam_07_0002__p1211312505212">Login Protection</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.2 "><p id="iam_07_0002__p1811385082118">Enable</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.2 "><p id="iam_07_0002__p14113185072120">If login protection is enabled, user <strong id="iam_07_0002__b16267121278">Bob</strong> will need to enter a verification code in addition to the username and password during login. Enable this function for account security.</p>
<p id="iam_07_0002__p141131505213">You can choose from SMS-, email-, and <a href="iam_10_0002.html#iam_10_0002__section0864223164311">virtual MFA</a>based login verification.</p>
</td>
</tr>
<tr id="iam_07_0002__row5113145018214"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.1 "><p id="iam_07_0002__p81139503215">Disable</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.5.2.1.1.5.1.2 "><p id="iam_07_0002__p911335072115">For this example, disable login protection.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="note" id="iam_07_0002__note865973310475"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="iam_07_0002__p17462184419253">Programmatic access: Users can access cloud services using development tools (including APIs, CLI, and SDKs) that support key authentication. This access type is recommended for developers.</p>
</div></div>
</p></li><li id="iam_07_0002__li88772526489"><span>Click <strong id="iam_07_0002__b1842034385819">Next</strong>. A page is displayed for you to select a user group.</span></li><li id="iam_07_0002__l325822f9287240eb9847d7175bcc7196"><span>Select the <span class="parmvalue" id="iam_07_0002__parmvalue209161118194916"><b>admin</b></span> user group.</span></li><li id="iam_07_0002__l28ac8715904644fbbb0eecaa4737c315"><span>Click <strong id="iam_07_0002__b113827131829">Create</strong>.</span></li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="iam_01_0027.html">Getting Started</a></div>
</div>
</div>