# Permissions

You need an account on the management console to create, query, and delete DIS streams, and need an Access Key ID/Secret Access Key (AK/SK) file to push, pull, and dump data.

For details about how to perform operations on IAM, see IAM User Guide.

For details about DIS permissions, see Table 1 and Permissions.

Table 1 Permission list
Node Name | Permission Name | Managed Cloud Resource | Description | How to Assign Permissions
--- | --- | --- | --- | ---
Base | Tenant Administrator | All services | Users have permission to operate all cloud resources owned by an enterprise. | Permission parameter settings: Region: set to the region to which your cloud resources belong. Project: set to the project to which your cloud resources belong. Policy: set to Tenant Administrator.

DIS

DIS Administrator

DIS

Users have permissions to perform the following operations:

- Create, delete, modify, and query DIS streams
- Create, delete, modify, and query dump tasks
- Upload and download data through a stream
- Query stream monitoring metrics

Permission parameter settings:

- Region: set to the region to which DIS streams belong.
- Project: set to the project to which DIS streams belong.
- Policy: set to DIS Administrator.

Assign different permissions based on the destination to which data of DIS streams will be dumped.

- To create DIS streams capable of dumping data to OBS and ensure that the users have permissions to use both DIS and OBS.
- Parameter settings required for using OBS:

  Region: set to Global service.

  Project: set to OBS.

  Policy: set to Tenant Administrator.

Parent topic: Overview