doc-exports/docs/obs/umn/obs_03_0037.html
zhangyue 92e44874e7 OBS UMN DOC
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com>
Co-authored-by: zhangyue <zhangyue164@huawei.com>
Co-committed-by: zhangyue <zhangyue164@huawei.com>
2024-11-06 14:33:05 +00:00

15 lines
4.1 KiB
HTML

<a name="obs_03_0037"></a><a name="obs_03_0037"></a>
<h1 class="topictitle1">Creating an IAM Agency</h1>
<div id="body1530063787773"><p id="obs_03_0037__p73929984212">To use some OBS features, you need to use IAM agencies to grant required permissions to OBS for processing your data.</p>
<div class="section" id="obs_03_0037__section3206135419349"><h4 class="sectiontitle">Creating an Agency for Cross-Region Replication</h4><ol id="obs_03_0037__ol5996339393"><li id="obs_03_0037__li79915335394"><span>In the <strong id="obs_03_0037__b97842535191">Create Cross-Region Replication Rule</strong> dialog box on OBS Console, click <strong id="obs_03_0037__b187969242185">Create IAM agencies</strong> to jump to the <strong id="obs_03_0037__b978975301917">Agencies</strong> page on the IAM console.</span></li><li id="obs_03_0037__li8991133123911"><span>Click <strong id="obs_03_0037__b186681916102018">Create Agency</strong>.</span></li><li id="obs_03_0037__li39953320399"><span>Enter an agency name.</span></li><li id="obs_03_0037__li69919331395"><span>Select <strong id="obs_03_0037__b5312917209">Cloud service</strong> for the <strong id="obs_03_0037__b193299207">Agency Type</strong>.</span></li><li id="obs_03_0037__li799113303916"><span>Select <strong id="obs_03_0037__b1667833713216">Object Storage Service (OBS)</strong> for <strong id="obs_03_0037__b13425519487">Cloud Service</strong>.</span></li><li id="obs_03_0037__li1499163316396"><span>Select a validity period.</span></li><li id="obs_03_0037__li19992332393"><span>In the <strong id="obs_03_0037__b115781718193914">Permissions</strong> area, select <strong id="obs_03_0037__b678817914419">Project View</strong>, locate <strong id="obs_03_0037__b14624142344120">Global service [Global]</strong>, and click <strong id="obs_03_0037__b194037253012">Modify Permissions</strong> in the <strong id="obs_03_0037__b114604341101">Operation</strong> column. The <strong id="obs_03_0037__b149276481508">Modify Permissions</strong> window is displayed.</span></li><li id="obs_03_0037__li1345055963015"><span>Click <strong id="obs_03_0037__b718063013313">Select Policy/Role</strong> in the <strong id="obs_03_0037__b185251022132513">Operation</strong> column of the row where <strong id="obs_03_0037__b09851216336">Global service [Global]</strong> is displayed. Search for <strong id="obs_03_0037__b12814123694512">Tenant Administrator</strong> and check the box next to it, and click <strong id="obs_03_0037__b981412365458">OK</strong>.</span></li><li id="obs_03_0037__li799173320395"><span>(Optional) If <strong id="obs_03_0037__b983321773610">Replicate KMS encrypted objects</strong> is selected when configuring the cross-region replication rule, the <strong id="obs_03_0037__b92132331367">KMS Administrator</strong> policy set must be configured in the regions where the source bucket and destination bucket are located.</span><p><ol type="a" id="obs_03_0037__ol10993338392"><li id="obs_03_0037__li79903311394">Click <strong id="obs_03_0037__b723135193019">Modify Permissions</strong> in the row of the region where the source/destination bucket resides. The <strong id="obs_03_0037__b934841623711">Modify Permissions</strong> dialog box is displayed.</li><li id="obs_03_0037__li18761184484018">Click <strong id="obs_03_0037__b10772132743413">Select Policy/Role</strong> in the row of the region where the source/destination bucket resides. The <strong id="obs_03_0037__b2448195713340">Select Policy/Role</strong> dialog box is displayed.</li><li id="obs_03_0037__li1799173393917">Search for <strong id="obs_03_0037__b13480727191618">KMS</strong> and check the box next to the <strong id="obs_03_0037__b1372953619167">KMS Administrator</strong> policy set.</li><li id="obs_03_0037__li2999337394">Click <strong id="obs_03_0037__b2134736173818">OK</strong>.</li></ol>
</p></li><li id="obs_03_0037__li3537171744411"><span>Click <strong id="obs_03_0037__b12842154895015">OK</strong> to complete the agency creation. </span></li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0036.html">Related Operations</a></div>
</div>
</div>