diff --git a/docs/eps/umn/ALL_META.TXT.json b/docs/eps/umn/ALL_META.TXT.json
new file mode 100644
index 000000000..b77b6bcfa
--- /dev/null
+++ b/docs/eps/umn/ALL_META.TXT.json
@@ -0,0 +1,689 @@
+[
+ {
+ "dockw":"User Guide"
+ },
+ {
+ "uri":"em_eps_01_0000.html",
+ "node_id":"em_eps_01_0000.xml",
+ "product_code":"em",
+ "code":"1",
+ "des":"Enterprise Project Management Service (EPS) provides a cloud governance platform. It allows an enterprise to manage personnel, resources, and permissions based on their o",
+ "doc_type":"usermanual",
+ "kw":"What Is Enterprise Project Management Service?,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"What Is Enterprise Project Management Service?",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0001.html",
+ "node_id":"em_01_0001.xml",
+ "product_code":"em",
+ "code":"2",
+ "des":"Enterprise projects allow you to control access to your resources based on your organizational structure by granting different user groups different permissions and centr",
+ "doc_type":"usermanual",
+ "kw":"Application Scenarios,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Application Scenarios",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0005.html",
+ "node_id":"em_01_0005.xml",
+ "product_code":"em",
+ "code":"3",
+ "des":"For services and resources supported by EPS, you need to go to the EPS console to check it out.On the Enterprise Project Management Service page, you can locate a target ",
+ "doc_type":"usermanual",
+ "kw":"Supported Services,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Supported Services",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0006.html",
+ "node_id":"em_01_0006.xml",
+ "product_code":"em",
+ "code":"4",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"Permissions",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Permissions",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0007.html",
+ "node_id":"em_01_0007.xml",
+ "product_code":"em",
+ "code":"5",
+ "des":"Administrator: The administrator can perform any operations on the Enterprise Project Management page.IAM user: An IAM user's permissions are granted by the administrator",
+ "doc_type":"usermanual",
+ "kw":"Enterprise Project Permissions,Permissions,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Enterprise Project Permissions",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0008.html",
+ "node_id":"em_01_0008.xml",
+ "product_code":"em",
+ "code":"6",
+ "des":"IAM allows you to control resource access by enterprise project. You can assign users or user groups different permissions for them to access resources in different enter",
+ "doc_type":"usermanual",
+ "kw":"Cloud Service Permissions,Permissions,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Cloud Service Permissions",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0002.html",
+ "node_id":"em_01_0002.xml",
+ "product_code":"em",
+ "code":"7",
+ "des":"You have been granted with the permissions to use EPS.The Enterprise Project Management page is displayed.",
+ "doc_type":"usermanual",
+ "kw":"Accessing the Project Management Page,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Accessing the Project Management Page",
+ "githuburl":""
+ },
+ {
+ "uri":"em_eps_04_0000.html",
+ "node_id":"em_eps_04_0000.xml",
+ "product_code":"em",
+ "code":"8",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"Multi-project Management",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Multi-project Management",
+ "githuburl":""
+ },
+ {
+ "uri":"em_eps_04_0100.html",
+ "node_id":"em_eps_04_0100.xml",
+ "product_code":"em",
+ "code":"9",
+ "des":"Company A is an enterprise user and has multiple project teams that require different resources and personnel. This topic presents the best practice for multi-project man",
+ "doc_type":"usermanual",
+ "kw":"Scenario,Multi-project Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Scenario",
+ "githuburl":""
+ },
+ {
+ "uri":"em_eps_04_0200.html",
+ "node_id":"em_eps_04_0200.xml",
+ "product_code":"em",
+ "code":"10",
+ "des":"The following figure illustrates the process of enterprise project management for addressing company A's requirements.Step 1: Create enterprise projects on the Enterprise",
+ "doc_type":"usermanual",
+ "kw":"Procedure,Multi-project Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Procedure",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0010.html",
+ "node_id":"em_01_0010.xml",
+ "product_code":"em",
+ "code":"11",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"Enterprise Project Management",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Enterprise Project Management",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0011.html",
+ "node_id":"em_01_0011.xml",
+ "product_code":"em",
+ "code":"12",
+ "des":"You can create an enterprise project for a department or based on your business requirements.Only the administrator or the user with the EPS Admin policy is allowed to cr",
+ "doc_type":"usermanual",
+ "kw":"Creating an Enterprise Project,Enterprise Project Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Creating an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0012.html",
+ "node_id":"em_01_0012.xml",
+ "product_code":"em",
+ "code":"13",
+ "des":"You can modify, enable, or disable enterprise projects when your business changes.For resource security, enterprise projects cannot be deleted. If a project will no longe",
+ "doc_type":"usermanual",
+ "kw":"Modifying, Enabling, or Disabling an Enterprise Project,Enterprise Project Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Modifying, Enabling, or Disabling an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0013.html",
+ "node_id":"em_01_0013.xml",
+ "product_code":"em",
+ "code":"14",
+ "des":"To manage resources at the project level, you need to associate resources with enterprise projects when creating the resources.You can add cloud resources to an enterpris",
+ "doc_type":"usermanual",
+ "kw":"Selecting an Enterprise Project for a New Cloud Resource,Enterprise Project Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Selecting an Enterprise Project for a New Cloud Resource",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0003.html",
+ "node_id":"em_01_0003.xml",
+ "product_code":"em",
+ "code":"15",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"Enterprise Project Resource Management",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Enterprise Project Resource Management",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0004.html",
+ "node_id":"em_01_0004.xml",
+ "product_code":"em",
+ "code":"16",
+ "des":"You can use enterprise projects to group and manage cloud resources (for example, resources used for the same purpose).Transferring a resource between enterprise projects",
+ "doc_type":"usermanual",
+ "kw":"Resource Management Overview,Enterprise Project Resource Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Resource Management Overview",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0015.html",
+ "node_id":"em_01_0015.xml",
+ "product_code":"em",
+ "code":"17",
+ "des":"You can view all resources of an enterprise project.The enterprise project details page is displayed. You can view the resources in the enterprise project on the Resource",
+ "doc_type":"usermanual",
+ "kw":"Viewing Resources in an Enterprise Project,Enterprise Project Resource Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Viewing Resources in an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0016.html",
+ "node_id":"em_01_0016.xml",
+ "product_code":"em",
+ "code":"18",
+ "des":"If your need to group and manage resources based on your business or when resource groups need to be changed, you can reallocate resources by adding or removing them from",
+ "doc_type":"usermanual",
+ "kw":"Adding Resources to an Enterprise Project,Enterprise Project Resource Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Adding Resources to an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0017.html",
+ "node_id":"em_01_0017.xml",
+ "product_code":"em",
+ "code":"19",
+ "des":"If your need to group and manage resources based on your business or when resource groups need to be changed, you can reallocate resources by adding or removing them from",
+ "doc_type":"usermanual",
+ "kw":"Removing Resources from an Enterprise Project,Enterprise Project Resource Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Removing Resources from an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0018.html",
+ "node_id":"em_01_0018.xml",
+ "product_code":"em",
+ "code":"20",
+ "des":"You can view details of migration events, including time, operator, operation, resource ID, source enterprise project, and destination enterprise project of each event.Ev",
+ "doc_type":"usermanual",
+ "kw":"Viewing Migration Events,Enterprise Project Resource Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Viewing Migration Events",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0020.html",
+ "node_id":"em_01_0020.xml",
+ "product_code":"em",
+ "code":"21",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"Enterprise Personnel Management",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Enterprise Personnel Management",
+ "githuburl":""
+ },
+ {
+ "uri":"en-us_topic_0108763970.html",
+ "node_id":"en-us_topic_0108763970.xml",
+ "product_code":"em",
+ "code":"22",
+ "des":"You can centrally manage all authorization records of your enterprise projects on the authorization management page of IAM.The Enterprise Project Management page is displ",
+ "doc_type":"usermanual",
+ "kw":"Viewing Enterprise Project Authorization Records,Enterprise Personnel Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Viewing Enterprise Project Authorization Records",
+ "githuburl":""
+ },
+ {
+ "uri":"en-us_topic_0109989489.html",
+ "node_id":"en-us_topic_0109989489.xml",
+ "product_code":"em",
+ "code":"23",
+ "des":"You can authorize user groups to manage enterprise projects, and users will inherit permissions from their user groups. The following procedure shows how to authorize a u",
+ "doc_type":"usermanual",
+ "kw":"Authorizing a User Group to Manage an Enterprise Project,Enterprise Personnel Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Authorizing a User Group to Manage an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"en-us_topic_0109989488.html",
+ "node_id":"en-us_topic_0109989488.xml",
+ "product_code":"em",
+ "code":"24",
+ "des":"You can remove user groups from enterprise projects as needed.Batch operations are supported.After a user group is disassociated from an enterprise project, they can no l",
+ "doc_type":"usermanual",
+ "kw":"Removing a User Group from an Enterprise Project,Enterprise Personnel Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Removing a User Group from an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em-pm_04_0802.html",
+ "node_id":"em-pm_04_0802.xml",
+ "product_code":"em",
+ "code":"25",
+ "des":"You can authorize users to manage enterprise projects. The user can access resources in enterprise projects based on the permissions assigned. The following procedure sho",
+ "doc_type":"usermanual",
+ "kw":"Authorizing a User to Manage an Enterprise Project,Enterprise Personnel Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Authorizing a User to Manage an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em-pm_04_0803.html",
+ "node_id":"em-pm_04_0803.xml",
+ "product_code":"em",
+ "code":"26",
+ "des":"You can remove users from enterprise projects as needed.Batch operations are supported.After a user is disassociated from an enterprise project, they can no longer manage",
+ "doc_type":"usermanual",
+ "kw":"Removing Users from an Enterprise Project,Enterprise Personnel Management,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Removing Users from an Enterprise Project",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0045.html",
+ "node_id":"em_01_0045.xml",
+ "product_code":"em",
+ "code":"27",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"Recording TMS Operations Using CTS",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Recording TMS Operations Using CTS",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0046.html",
+ "node_id":"em_01_0046.xml",
+ "product_code":"em",
+ "code":"28",
+ "des":"Table 1 lists the enterprise project operations that will be recorded by CTS.",
+ "doc_type":"usermanual",
+ "kw":"Key TMS Operations,Recording TMS Operations Using CTS,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Key TMS Operations",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0047.html",
+ "node_id":"em_01_0047.xml",
+ "product_code":"em",
+ "code":"29",
+ "des":"Cloud Trace Service (CTS) records operations performed on cloud service resources. A record contains information such as the user who performed the operation, IP address,",
+ "doc_type":"usermanual",
+ "kw":"Viewing CTS Traces in the Trace List,Recording TMS Operations Using CTS,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Viewing CTS Traces in the Trace List",
+ "githuburl":""
+ },
+ {
+ "uri":"em-pm_04_0900.html",
+ "node_id":"em-pm_04_0900.xml",
+ "product_code":"em",
+ "code":"30",
+ "des":"Quotas are the limits put on resources to prevent waste. Each service has their own quotas. For example, a quota can restrict the maximum enterprise projects that a user ",
+ "doc_type":"usermanual",
+ "kw":"Quotas,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Quotas",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0034.html",
+ "node_id":"em_01_0034.xml",
+ "product_code":"em",
+ "code":"31",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"FAQs",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"FAQs",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0035.html",
+ "node_id":"em_01_0035.xml",
+ "product_code":"em",
+ "code":"32",
+ "des":"Enterprise Management enables enterprises to manage cloud resources at the organization and project levels. Enterprise Management mainly provides project management, pers",
+ "doc_type":"usermanual",
+ "kw":"What Are the Differences Between IAM and Enterprise Management,FAQs,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"What Are the Differences Between IAM and Enterprise Management",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0036.html",
+ "node_id":"em_01_0036.xml",
+ "product_code":"em",
+ "code":"33",
+ "des":"IAM projects group and physically isolate resources in the same region.Resources cannot be transferred between IAM projects, but can only be deleted and then rebuilt.Ente",
+ "doc_type":"usermanual",
+ "kw":"What Are the Differences Between IAM Projects and Enterprise Projects?,FAQs,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"What Are the Differences Between IAM Projects and Enterprise Projects?",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0037.html",
+ "node_id":"em_01_0037.xml",
+ "product_code":"em",
+ "code":"34",
+ "des":"Generally, a user can only view the enterprise projects on which the user has permissions. To view all enterprise projects, a user must:Be an administrator.Be an IAM user",
+ "doc_type":"usermanual",
+ "kw":"How Can I Access All Enterprise Projects?,FAQs,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"How Can I Access All Enterprise Projects?",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0039.html",
+ "node_id":"em_01_0039.xml",
+ "product_code":"em",
+ "code":"35",
+ "des":"By calling an APICloud services can be authorized by IAM to call the API that is used to query a list of enterprise projects. The returned project list contains the ID of",
+ "doc_type":"usermanual",
+ "kw":"How Do I Obtain an Enterprise Project ID?,FAQs,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"How Do I Obtain an Enterprise Project ID?",
+ "githuburl":""
+ },
+ {
+ "uri":"em_eps_16_1000.html",
+ "node_id":"em_eps_16_1000.xml",
+ "product_code":"em",
+ "code":"36",
+ "des":"By default, you can create up to 100 enterprise projects.If the default quota cannot meet your requirements, you can How Do I Apply for a Higher Quota?.Disabled enterpris",
+ "doc_type":"usermanual",
+ "kw":"How Many Enterprise Projects Can I Create?,FAQs,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"How Many Enterprise Projects Can I Create?",
+ "githuburl":""
+ },
+ {
+ "uri":"em_eps_16_1100.html",
+ "node_id":"em_eps_16_1100.xml",
+ "product_code":"em",
+ "code":"37",
+ "des":"No.Transferring resources between enterprise projects may affect resource access for users that are added to the projects. It will not change the VPC or related IPs of th",
+ "doc_type":"usermanual",
+ "kw":"Will Adding or Removing a Resource from an Enterprise Project Change the VPC and Related IPs of the ",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Will Adding or Removing a Resource from an Enterprise Project Change the VPC and Related IPs of the Resource?",
+ "githuburl":""
+ },
+ {
+ "uri":"em_01_0031.html",
+ "node_id":"em_01_0031.xml",
+ "product_code":"em",
+ "code":"38",
+ "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "doc_type":"usermanual",
+ "kw":"Change History,User Guide",
+ "search_title":"",
+ "metedata":[
+ {
+ "prodname":"em",
+ "documenttype":"usermanual"
+ }
+ ],
+ "title":"Change History",
+ "githuburl":""
+ }
+]
\ No newline at end of file
diff --git a/docs/eps/umn/CLASS.TXT.json b/docs/eps/umn/CLASS.TXT.json
new file mode 100644
index 000000000..4e6b118e7
--- /dev/null
+++ b/docs/eps/umn/CLASS.TXT.json
@@ -0,0 +1,344 @@
+[
+ {
+ "desc":"Enterprise Project Management Service (EPS) provides a cloud governance platform. It allows an enterprise to manage personnel, resources, and permissions based on their o",
+ "product_code":"em",
+ "title":"What Is Enterprise Project Management Service?",
+ "uri":"em_eps_01_0000.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"1"
+ },
+ {
+ "desc":"Enterprise projects allow you to control access to your resources based on your organizational structure by granting different user groups different permissions and centr",
+ "product_code":"em",
+ "title":"Application Scenarios",
+ "uri":"em_01_0001.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"2"
+ },
+ {
+ "desc":"For services and resources supported by EPS, you need to go to the EPS console to check it out.On the Enterprise Project Management Service page, you can locate a target ",
+ "product_code":"em",
+ "title":"Supported Services",
+ "uri":"em_01_0005.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"3"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"Permissions",
+ "uri":"em_01_0006.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"4"
+ },
+ {
+ "desc":"Administrator: The administrator can perform any operations on the Enterprise Project Management page.IAM user: An IAM user's permissions are granted by the administrator",
+ "product_code":"em",
+ "title":"Enterprise Project Permissions",
+ "uri":"em_01_0007.html",
+ "doc_type":"usermanual",
+ "p_code":"4",
+ "code":"5"
+ },
+ {
+ "desc":"IAM allows you to control resource access by enterprise project. You can assign users or user groups different permissions for them to access resources in different enter",
+ "product_code":"em",
+ "title":"Cloud Service Permissions",
+ "uri":"em_01_0008.html",
+ "doc_type":"usermanual",
+ "p_code":"4",
+ "code":"6"
+ },
+ {
+ "desc":"You have been granted with the permissions to use EPS.The Enterprise Project Management page is displayed.",
+ "product_code":"em",
+ "title":"Accessing the Project Management Page",
+ "uri":"em_01_0002.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"7"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"Multi-project Management",
+ "uri":"em_eps_04_0000.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"8"
+ },
+ {
+ "desc":"Company A is an enterprise user and has multiple project teams that require different resources and personnel. This topic presents the best practice for multi-project man",
+ "product_code":"em",
+ "title":"Scenario",
+ "uri":"em_eps_04_0100.html",
+ "doc_type":"usermanual",
+ "p_code":"8",
+ "code":"9"
+ },
+ {
+ "desc":"The following figure illustrates the process of enterprise project management for addressing company A's requirements.Step 1: Create enterprise projects on the Enterprise",
+ "product_code":"em",
+ "title":"Procedure",
+ "uri":"em_eps_04_0200.html",
+ "doc_type":"usermanual",
+ "p_code":"8",
+ "code":"10"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"Enterprise Project Management",
+ "uri":"em_01_0010.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"11"
+ },
+ {
+ "desc":"You can create an enterprise project for a department or based on your business requirements.Only the administrator or the user with the EPS Admin policy is allowed to cr",
+ "product_code":"em",
+ "title":"Creating an Enterprise Project",
+ "uri":"em_01_0011.html",
+ "doc_type":"usermanual",
+ "p_code":"11",
+ "code":"12"
+ },
+ {
+ "desc":"You can modify, enable, or disable enterprise projects when your business changes.For resource security, enterprise projects cannot be deleted. If a project will no longe",
+ "product_code":"em",
+ "title":"Modifying, Enabling, or Disabling an Enterprise Project",
+ "uri":"em_01_0012.html",
+ "doc_type":"usermanual",
+ "p_code":"11",
+ "code":"13"
+ },
+ {
+ "desc":"To manage resources at the project level, you need to associate resources with enterprise projects when creating the resources.You can add cloud resources to an enterpris",
+ "product_code":"em",
+ "title":"Selecting an Enterprise Project for a New Cloud Resource",
+ "uri":"em_01_0013.html",
+ "doc_type":"usermanual",
+ "p_code":"11",
+ "code":"14"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"Enterprise Project Resource Management",
+ "uri":"em_01_0003.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"15"
+ },
+ {
+ "desc":"You can use enterprise projects to group and manage cloud resources (for example, resources used for the same purpose).Transferring a resource between enterprise projects",
+ "product_code":"em",
+ "title":"Resource Management Overview",
+ "uri":"em_01_0004.html",
+ "doc_type":"usermanual",
+ "p_code":"15",
+ "code":"16"
+ },
+ {
+ "desc":"You can view all resources of an enterprise project.The enterprise project details page is displayed. You can view the resources in the enterprise project on the Resource",
+ "product_code":"em",
+ "title":"Viewing Resources in an Enterprise Project",
+ "uri":"em_01_0015.html",
+ "doc_type":"usermanual",
+ "p_code":"15",
+ "code":"17"
+ },
+ {
+ "desc":"If your need to group and manage resources based on your business or when resource groups need to be changed, you can reallocate resources by adding or removing them from",
+ "product_code":"em",
+ "title":"Adding Resources to an Enterprise Project",
+ "uri":"em_01_0016.html",
+ "doc_type":"usermanual",
+ "p_code":"15",
+ "code":"18"
+ },
+ {
+ "desc":"If your need to group and manage resources based on your business or when resource groups need to be changed, you can reallocate resources by adding or removing them from",
+ "product_code":"em",
+ "title":"Removing Resources from an Enterprise Project",
+ "uri":"em_01_0017.html",
+ "doc_type":"usermanual",
+ "p_code":"15",
+ "code":"19"
+ },
+ {
+ "desc":"You can view details of migration events, including time, operator, operation, resource ID, source enterprise project, and destination enterprise project of each event.Ev",
+ "product_code":"em",
+ "title":"Viewing Migration Events",
+ "uri":"em_01_0018.html",
+ "doc_type":"usermanual",
+ "p_code":"15",
+ "code":"20"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"Enterprise Personnel Management",
+ "uri":"em_01_0020.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"21"
+ },
+ {
+ "desc":"You can centrally manage all authorization records of your enterprise projects on the authorization management page of IAM.The Enterprise Project Management page is displ",
+ "product_code":"em",
+ "title":"Viewing Enterprise Project Authorization Records",
+ "uri":"en-us_topic_0108763970.html",
+ "doc_type":"usermanual",
+ "p_code":"21",
+ "code":"22"
+ },
+ {
+ "desc":"You can authorize user groups to manage enterprise projects, and users will inherit permissions from their user groups. The following procedure shows how to authorize a u",
+ "product_code":"em",
+ "title":"Authorizing a User Group to Manage an Enterprise Project",
+ "uri":"en-us_topic_0109989489.html",
+ "doc_type":"usermanual",
+ "p_code":"21",
+ "code":"23"
+ },
+ {
+ "desc":"You can remove user groups from enterprise projects as needed.Batch operations are supported.After a user group is disassociated from an enterprise project, they can no l",
+ "product_code":"em",
+ "title":"Removing a User Group from an Enterprise Project",
+ "uri":"en-us_topic_0109989488.html",
+ "doc_type":"usermanual",
+ "p_code":"21",
+ "code":"24"
+ },
+ {
+ "desc":"You can authorize users to manage enterprise projects. The user can access resources in enterprise projects based on the permissions assigned. The following procedure sho",
+ "product_code":"em",
+ "title":"Authorizing a User to Manage an Enterprise Project",
+ "uri":"em-pm_04_0802.html",
+ "doc_type":"usermanual",
+ "p_code":"21",
+ "code":"25"
+ },
+ {
+ "desc":"You can remove users from enterprise projects as needed.Batch operations are supported.After a user is disassociated from an enterprise project, they can no longer manage",
+ "product_code":"em",
+ "title":"Removing Users from an Enterprise Project",
+ "uri":"em-pm_04_0803.html",
+ "doc_type":"usermanual",
+ "p_code":"21",
+ "code":"26"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"Recording TMS Operations Using CTS",
+ "uri":"em_01_0045.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"27"
+ },
+ {
+ "desc":"Table 1 lists the enterprise project operations that will be recorded by CTS.",
+ "product_code":"em",
+ "title":"Key TMS Operations",
+ "uri":"em_01_0046.html",
+ "doc_type":"usermanual",
+ "p_code":"27",
+ "code":"28"
+ },
+ {
+ "desc":"Cloud Trace Service (CTS) records operations performed on cloud service resources. A record contains information such as the user who performed the operation, IP address,",
+ "product_code":"em",
+ "title":"Viewing CTS Traces in the Trace List",
+ "uri":"em_01_0047.html",
+ "doc_type":"usermanual",
+ "p_code":"27",
+ "code":"29"
+ },
+ {
+ "desc":"Quotas are the limits put on resources to prevent waste. Each service has their own quotas. For example, a quota can restrict the maximum enterprise projects that a user ",
+ "product_code":"em",
+ "title":"Quotas",
+ "uri":"em-pm_04_0900.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"30"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"FAQs",
+ "uri":"em_01_0034.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"31"
+ },
+ {
+ "desc":"Enterprise Management enables enterprises to manage cloud resources at the organization and project levels. Enterprise Management mainly provides project management, pers",
+ "product_code":"em",
+ "title":"What Are the Differences Between IAM and Enterprise Management",
+ "uri":"em_01_0035.html",
+ "doc_type":"usermanual",
+ "p_code":"31",
+ "code":"32"
+ },
+ {
+ "desc":"IAM projects group and physically isolate resources in the same region.Resources cannot be transferred between IAM projects, but can only be deleted and then rebuilt.Ente",
+ "product_code":"em",
+ "title":"What Are the Differences Between IAM Projects and Enterprise Projects?",
+ "uri":"em_01_0036.html",
+ "doc_type":"usermanual",
+ "p_code":"31",
+ "code":"33"
+ },
+ {
+ "desc":"Generally, a user can only view the enterprise projects on which the user has permissions. To view all enterprise projects, a user must:Be an administrator.Be an IAM user",
+ "product_code":"em",
+ "title":"How Can I Access All Enterprise Projects?",
+ "uri":"em_01_0037.html",
+ "doc_type":"usermanual",
+ "p_code":"31",
+ "code":"34"
+ },
+ {
+ "desc":"By calling an APICloud services can be authorized by IAM to call the API that is used to query a list of enterprise projects. The returned project list contains the ID of",
+ "product_code":"em",
+ "title":"How Do I Obtain an Enterprise Project ID?",
+ "uri":"em_01_0039.html",
+ "doc_type":"usermanual",
+ "p_code":"31",
+ "code":"35"
+ },
+ {
+ "desc":"By default, you can create up to 100 enterprise projects.If the default quota cannot meet your requirements, you can How Do I Apply for a Higher Quota?.Disabled enterpris",
+ "product_code":"em",
+ "title":"How Many Enterprise Projects Can I Create?",
+ "uri":"em_eps_16_1000.html",
+ "doc_type":"usermanual",
+ "p_code":"31",
+ "code":"36"
+ },
+ {
+ "desc":"No.Transferring resources between enterprise projects may affect resource access for users that are added to the projects. It will not change the VPC or related IPs of th",
+ "product_code":"em",
+ "title":"Will Adding or Removing a Resource from an Enterprise Project Change the VPC and Related IPs of the Resource?",
+ "uri":"em_eps_16_1100.html",
+ "doc_type":"usermanual",
+ "p_code":"31",
+ "code":"37"
+ },
+ {
+ "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
+ "product_code":"em",
+ "title":"Change History",
+ "uri":"em_01_0031.html",
+ "doc_type":"usermanual",
+ "p_code":"",
+ "code":"38"
+ }
+]
\ No newline at end of file
diff --git a/docs/eps/umn/PARAMETERS.txt b/docs/eps/umn/PARAMETERS.txt
new file mode 100644
index 000000000..6da8d5f07
--- /dev/null
+++ b/docs/eps/umn/PARAMETERS.txt
@@ -0,0 +1,3 @@
+version=""
+language="en-us"
+type=""
\ No newline at end of file
diff --git a/docs/eps/umn/em-pm_04_0802.html b/docs/eps/umn/em-pm_04_0802.html
new file mode 100644
index 000000000..4e27e76a6
--- /dev/null
+++ b/docs/eps/umn/em-pm_04_0802.html
@@ -0,0 +1,20 @@
+
+
+Authorizing a User to Manage an Enterprise Project
+Scenario
You can authorize users to manage enterprise projects. The user can access resources in enterprise projects based on the permissions assigned. The following procedure shows how to authorize a user to manage an enterprise project.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - On the Enterprise Project Management Service page, click the name of the enterprise project you want to view.
- On the enterprise project details page that is displayed, click the Permissions tab, and click Authorize User.
The IAM Users page is displayed. Select a user and authorize the user to manage the enterprise project.
+For details, see Assigning Permissions to an IAM User.
+Figure 1 Authorizing users
+
+
+
+
Removing Users from an Enterprise Project
+Scenario
You can remove users from enterprise projects as needed.
+
Batch operations are supported.
+
After a user is disassociated from an enterprise project, they can no longer manage the project.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - On the Enterprise Project Management Service page, click the name of the enterprise project you want to view.
- On the enterprise project details page that is displayed, click the Permissions tab, and click Authorize User.
Figure 1 Authorizing users
+ - On the IAM Users page that is displayed, click the user name to go to the user details page.
Figure 2 Users
+ - On the Permissions tab, click By Enterprise Project, select the target enterprise project, and click Delete in the Operation column.
To delete enterprise projects in batches, select the enterprise projects in the list and click Delete above the list.
+Figure 3 Deleting enterprise projects for a user
+ - In the displayed dialog box, click OK.
The enterprise projects that are managed by the user are deleted.
+
+
+
+
Quotas
+What Is Quota?
Quotas are the limits put on resources to prevent waste. Each service has their own quotas. For example, a quota can restrict the maximum enterprise projects that a user can create.
+
If the existing resource quota cannot meet your service requirements, you can apply for a higher quota.
+
By default, up to 100 projects can be created for an account. You can request to increase the quota.
+
The quota can be increased up to 256.
+
+
How Do I Apply for a Higher Quota?
The system does not support online quota adjustment. If you need to adjust a quota, call the hotline or send an email to the customer service mailbox. Customer service personnel will timely process your request for quota adjustment and inform you of the real-time progress by making a call or sending an email.
+
Before dialing the hotline number or sending an email, make sure that the following information has been obtained:
+
- Domain name, project name, and project ID, which can be obtained by performing the following operations:
Sign in to the management console, click the username in the upper right corner, select My Credentials from the drop-down list, and obtain the domain name, project name, and project ID on the My Credentials page.
+ - Quota information, which includes:
- Service name
- Quota type
- Required quota
+
+
Learn how to obtain the service hotline and email address.
+
+
Application Scenarios
+Enterprise projects allow you to control access to your resources based on your organizational structure by granting different user groups different permissions and centrally manage resources across regions.
+
The following describes typical application scenarios of enterprise projects.
+
Scenarios Classified by Business
If an enterprise has multiple programs that need to be started or stopped independently without affecting each other, it can create an enterprise project for each program for settlement and grant permissions to different persons to manage resources of different programs.
+
For example, a game company launches multiple games, such as A, B, and C. The cost of each game is calculated separately. Some games are popular and continue to operate. Others receive poor customer response and are discontinued after a period of time. In this case, the game company can create an independent enterprise project for each game respectively, for example, project A, B, and C, and add user groups to manage the projects. To access Enterprise Project Management Service (EPS), the company needs to apply for an account. Figure 1 shows the organization structure of the game company, and Figure 2 shows the solution diagram.
+
Figure 1 Organization structure
+
Figure 2 Solution diagram
+
+
Scenarios Classified by Organization Structure and Business
Enterprises can create projects and member accounts based on the organization structure. The resources and networks of the accounts can also be isolated from each other.
+
For example, an Internet enterprise needs to deploy the development environment and production environment during software development. The former is used for Alpha, Beta, and Gamma tests, and the latter is used to calculate costs based on programs (such as app program, mall program, and collaborative office program). The enterprise also requires that the two environments be isolated from each other to prevent the development tests from affecting the cost accounting in the production environment. Then two accounts are needed to separate the two environments. For account 1, projects A, B, and C can be created for Alpha, Beta, and Gamma. For account 2, projects D, E, and F can be created for the app program, mall program, and collaborative office program. Set a user group for each enterprise project to manage resources. Figure 3 shows the organization structure of the game company, and Figure 4 shows the solution diagram.
+
Figure 3 Organization structure
+
Figure 4 Solution diagram
+
+
Accessing the Project Management Page
+Prerequisites
You have been granted with the permissions to use EPS.
+
+
Procedure
- Log in to the management console.
- Go to the management console. In the upper right corner, choose Enterprise Management from the drop-down list of your account name.
The Enterprise Project Management page is displayed.
+Figure 1 Enterprise Management
+
+
+
Enterprise Project Resource Management
+
+
+
diff --git a/docs/eps/umn/em_01_0004.html b/docs/eps/umn/em_01_0004.html
new file mode 100644
index 000000000..f23928d92
--- /dev/null
+++ b/docs/eps/umn/em_01_0004.html
@@ -0,0 +1,15 @@
+
+
+Resource Management Overview
+You can use enterprise projects to group and manage cloud resources (for example, resources used for the same purpose).
+
Transferring a resource between enterprise projects does not affect the resource itself. For example, the transferring will not cause an instance to restart, change network configurations, or change the ownership of resources.
+
However, if you grant resource access based on enterprise projects, users may be affected to access related resources. For example, if you grant a user only the permissions to access resources of project A, after the resources are transferred to project B, the user may fail to access the resources due to insufficient permissions.
+
+
Supported Services
+For services and resources supported by EPS, you need to go to the EPS console to check it out.
+
On the Enterprise Project Management Service page, you can locate a target project and click View Resource in the Operation column to view the services and resources supported by the project.
+
The following table lists the supported cloud services and resources.
+
+
Table 1 Resources supported by EPSProduct Type
+ |
+Resource Type
+ |
+
|---|
+
+Elastic Cloud Server
+ |
+ECS
+ |
+
+Auto Scaling
+ |
+AS group
+ |
+
+Image Management Service
+ |
+Private image
+ |
+
+Elastic Volume Service
+ |
+Disk
+ |
+
+Virtual Private Cloud
+ |
+
+ |
+
+Elastic IP
+ |
+EIP
+ |
+
+Relational Database Service
+ |
+Instance
+ |
+
+Document Database Service
+ |
+Instance
+ |
+
+Cloud Container Engine
+ |
+Cluster
+ |
+
+Data Lake Insight
+ |
+
+ |
+
+Simple Message Notification
+ |
+Topic
+ |
+
+API Gateway
+ |
+Dedicated gateway
+ |
+
+Cloud Service Engine
+ |
+Engine
+ |
+
+Object Storage Service
+ |
+Bucket
+ |
+
+Host Security Service
+ |
+Host security
+ |
+
+DeH
+ |
+Dedicated host
+ |
+
+Data Replication Service
+ |
+- Disaster Recovery Task
- Data Synchronization Task
- Data Subscription Task
- Backup Migration Task
- Online Migration Task
+ |
+
+NAT Gateway
+ |
+Public NAT gateway
+ |
+
+Scalable File Service
+ |
+SFS-Turbo
+ |
+
+Cloud Data Migration
+ |
+Cluster
+ |
+
+Key Management Service
+ |
+KMS
+ |
+
+Cloud Search Service
+ |
+Cluster
+ |
+
+Data Warehouse Service
+ |
+Cluster
+ |
+
+GeminiDB
+ |
+Instance
+ |
+
+GaussDB
+ |
+GaussDB Instance
+ |
+
+Database Security Service
+ |
+Database audit instance
+ |
+
+DataArts Studio
+ |
+DAYU Instance
+ |
+
+Bare Metal Server
+ |
+BMS
+ |
+
+Dedicated Host
+ |
+DeH
+ |
+
+Data Ingestion Service
+ |
+Stream
+ |
+
+MapReduce Service
+ |
+Cluster
+ |
+
+Elastic Load Balance
+ |
+Load balancer
+ |
+
+Web Application Firewall
+ |
+Web Application Firewall Dedicated Instance
+ |
+
+Cloud Backup and Recovery
+ |
+Vault
+ |
+
+Cloud Eye
+ |
+- Alarm Rule
- Monitoring Panels
- Resource Groups
+ |
+
+Distributed Message Service
+ |
+Kafka instance
+ |
+
+
+
+
+
Permissions
+
+
+
diff --git a/docs/eps/umn/em_01_0007.html b/docs/eps/umn/em_01_0007.html
new file mode 100644
index 000000000..773004a0a
--- /dev/null
+++ b/docs/eps/umn/em_01_0007.html
@@ -0,0 +1,106 @@
+
+
+Enterprise Project Permissions
+Administrator: The administrator can perform any operations on the Enterprise Project Management page.
+
IAM user: An IAM user's permissions are granted by the administrator. After an IAM user logs in to the Enterprise Project Management page, the IAM user sees only the enterprise projects assigned by the administrator, and can only manage the resources allocated by the administrator. If the administrator assigns a permissions policy for an IAM user, the IAM user has all the permissions included in the policy.
+
The administrator can use the system-defined policies or custom policies to assign permissions to users. Policies related to enterprise projects include EPS Admin and EPS Viewer. You can use Identity and Access Management (IAM) to manage enterprise project permissions for IAM users. For details, see Identity and Access Management User Guide.
+
+
Table 1 Enterprise Management permissionsService Name
+ |
+Policy Name
+ |
+Description
+ |
+Typically Associated Personnel
+ |
+
|---|
+
+Enterprise Management
+
+ |
+EPS Admin
+ |
+- The Enterprise Management administrator policy, including all the permissions related to enterprise project management and personnel management. The policy allows users to create enterprises, migrate resources, add users to user groups, remove users from user groups, and set policies for user groups. The administrator can set the policy in the Global service in IAM.
- The administrator policy of a single enterprise project. The policy has only the permissions of the specific enterprise projects, including modifying, enabling, disabling, and viewing the specified enterprise projects. The administrator or the users granted the EPS Admin policy on IAM can set the policy in Enterprise Management.
+ |
+Enterprise asset administrators
+ |
+
+EPS Viewer
+ |
+Read-only permissions for a specific or all enterprise projects
+- Read-only permissions on Enterprise Management to view the information of all enterprise projects and users. The administrator can set the policy in the Global service in IAM.
- The administrator or the user to whom the EPS Admin policy is attached can set the permission in Enterprise Management.
+ |
+Enterprise asset query personnel
+ |
+
+
+
+
+
+
Table 2 Common operations and required permissionsOperation
+ |
+EPS Admin
+ |
+EPS Viewer
+ |
+
|---|
+
+Viewing resources in an enterprise project
+ |
+√
+ |
+√
+ |
+
+Creating an enterprise project
+ |
+√
+ |
+×
+ |
+
+Modifying an enterprise project
+ |
+√
+ |
+×
+ |
+
+Enabling an enterprise project
+ |
+√
+ |
+×
+ |
+
+Disabling an enterprise project
+ |
+√
+ |
+×
+ |
+
+Adding a resource to an enterprise project
+ |
+√
+ |
+×
+ |
+
+Removing a resource from an enterprise project
+ |
+√
+ |
+×
+ |
+
+
+
+
+
Cloud Service Permissions
+IAM allows you to control resource access by enterprise project. You can assign users or user groups different permissions for them to access resources in different enterprise projects. For services supported by Enterprise Project Management, see Supported Services. For default permissions of each service, see Permissions
+
When the services supported by EPS are associated with services that are not, additional permissions are demanded to manage them. You can use the following methods to configure dependent policies:
+
+
Enterprise Project Management
+
+
+
diff --git a/docs/eps/umn/em_01_0011.html b/docs/eps/umn/em_01_0011.html
new file mode 100644
index 000000000..72f9cedf0
--- /dev/null
+++ b/docs/eps/umn/em_01_0011.html
@@ -0,0 +1,46 @@
+
+
+Creating an Enterprise Project
+Scenario
You can create an enterprise project for a department or based on your business requirements.
+
+
Prerequisites
Only the administrator or the user with the EPS Admin policy is allowed to create enterprise projects.
+
+
Restrictions and Limitations
Up to 100 enterprise projects can be created in an account.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - On the Enterprise Project Management Service page, click Create Enterprise Project in the upper right corner.
The Create Enterprise Project page is displayed.
+Figure 1 Creating an enterprise project
+Figure 2 Creating an enterprise project
+ - Set Name and Description, and click OK.
+
Table 1 Configuration rulesParameter
+ |
+Description
+ |
+
|---|
+
+Name
+ |
+A project name can contain up to 255 characters. Only letters, digits, underscores (_), and hyphens (-) are allowed. The value cannot contain the word default in any form.
+Example: project_A
+ |
+
+Description
+ |
+The description can contain up to 512 characters.
+Example: The enterprise project is used to manage the resources of Project A.
+ |
+
+
+
+
To avoid data leakage, you are advised not to include personal or sensitive information in enterprise project descriptions or resource tags.
+
+
+
Modifying, Enabling, or Disabling an Enterprise Project
+Scenarios
You can modify, enable, or disable enterprise projects when your business changes.
+
For resource security, enterprise projects cannot be deleted. If a project will no longer be used, disable it.
+
- Disabled enterprise projects cannot be modified.
- Disabled enterprise projects still occupy the enterprise project quota. If your enterprise project quota cannot meet your requirement, contact O&M personnel to enable you to delete enterprise projects.
- Disabled enterprise projects will be deleted from Enterprise Project on the page of creating cloud services. Disabled enterprise projects will not support adding resources or creating user groups. Enable the enterprise projects if you want to use them.
- The default enterprise project cannot be modified or disabled.
+
+
+
Modifying an Enterprise Project
To modify the name or description of an enterprise project, perform the following steps:
+
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - Locate the target enterprise project and click More > Modify in the Operation column.
The Modify Enterprise Project dialog box pops up.
+Figure 1 Modifying an enterprise project
+ - Modify the project name or description.
+
Table 1 Configuration rulesParameter
+ |
+Description
+ |
+
|---|
+
+Name
+ |
+A project name can contain up to 255 characters. Only letters, digits, underscores (_), and hyphens (-) are allowed. The value cannot contain the word default in any form.
+Example: project_A
+ |
+
+Description
+ |
+The description can contain up to 512 characters.
+Example: The enterprise project is used to manage the resources of Project A.
+ |
+
+
+
+
- Click OK.
+
+
Enabling an Enterprise Project
To use a disabled enterprise project again, enable it.
+
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - Choose the disabled enterprise project, click More > Enable in the Operation column.
The Enable Enterprise Project dialog box pops up.
+Figure 2 Enabling an enterprise project
+ - Click OK. The enterprise project is enabled successfully.
+
+
Disabling an Enterprise Project
You can disable an enterprise project if you no longer need to use it because your enterprise structure is adjusted or business is reduced.
+
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - Choose the enabled enterprise project, click More > Disable in the Operation column.
The Disable Enterprise Project dialog box pops up
+Figure 3 Disabling an enterprise project
+ - Click OK and the project is disabled.
+
+
Selecting an Enterprise Project for a New Cloud Resource
+Scenarios
To manage resources at the project level, you need to associate resources with enterprise projects when creating the resources.
+
You can add cloud resources to an enterprise project using either of the following methods:
- EPS console
- Consoles of cloud services that support EPS
+
+
+
Limitations and Constraints
New cloud resources cannot be added to a disabled enterprise project.
+
+
Using the EPS Console
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - In the enterprise project list, click the name of the target enterprise project to access the enterprise project details page.
- Click Create Resource or Plan Network in the upper right corner of the page to add required cloud resources to the enterprise project.
Figure 1 Creating resources and planning the network
+
+
- Currently, you can create only four types of cloud resources: ECSs, EVS disks, EIPs, and RDS instances.
- When planning the network, only the following three types of cloud resources are supported: Virtual Private Cloud, VPC Peering, and Security Group.
+
+
+
Using the Console of Cloud Services that Support EPS
You can select an enabled enterprise project when configuring Enterprise Project on the cloud resource creation page. New cloud resources can be managed by the selected enterprise project.
+
Take RDS as an example. Perform the following operations:
+
- Log in to the management console.
- Click
in the upper left corner to select a region and a project. - Click
in the upper left corner of the page and choose Databases > Relational Database Service. - In the upper right corner of the page, click Create DB Instance.
The page for creating a DB instance is displayed.
+ - Configure the database details and select the target enterprise project from the Enterprise Project drop-down list.
Figure 2 Selecting an enterprise project
+ - In the lower right corner, click Create Now.
- Confirm the configurations and click Submit.
+
+
Viewing Resources in an Enterprise Project
+Scenario
You can view all resources of an enterprise project.
+
+
Procedure
- Click View Resource in the Operation column of the row containing the target enterprise project.
The enterprise project details page is displayed. You can view the resources in the enterprise project on the Resources tab.
+Figure 1 Viewing resources
+ - Set the resource search options.
- Select a region.
- Select a service type.
- Select a resource type.
+Click Search. The resources will be displayed in a table at the bottom of the page.
+
+
+
Adding Resources to an Enterprise Project
+Scenarios
If your need to group and manage resources based on your business or when resource groups need to be changed, you can reallocate resources by adding or removing them from projects.
+
EPS supports cross-region resource movement from one enterprise project to another.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - Click View Resource in the Operation column of the row containing the target enterprise project.
The enterprise project details page is displayed. You can view the resources in the enterprise project on the Resources tab.
+Figure 1 Viewing resources
+ - Click Add.
The Add Resource dialog box is displayed.
+ - Select a way of adding resources.
- Independent resources: Each resource is added as an independent resource. You can add multiple independent resources at the same time.
If resources other than ECSs need to be added, you must select this mode.
+You can select this mode to add ECSs to the enterprise project, but resources associated with the ECSs, such as EIPs and EVS disks, are not added to the enterprise project.
+ - ECSs and ECS associated resources: You only need to select the ECSs to be added, and the resources associated with the ECSs will be automatically added to the enterprise project at the same time.
Select this way only when the resources to be added are ECSs. Currently, only the associated EVS disks and EIPs can be added to an enterprise project along with the ECSs.
+
+ - Filter resources by service, region, or enterprise project in the filter box above the resource list or enter resource name in the search box for resource search.
If you select ECSs and ECS associated resources for Mode, you cannot filter resources by service or resource type.
+Resources meeting the search criteria will be displayed in the lower part of the page.
+Figure 2 Adding resources
+ - Select the resources to be added and click OK.
After the resources are added, they appear in the resource list of the target enterprise project.
+
+
+
Removing Resources from an Enterprise Project
+Scenarios
If your need to group and manage resources based on your business or when resource groups need to be changed, you can reallocate resources by adding or removing them from projects.
+
EPS allows removal of cross-region resources from the same enterprise project for management.
+
Resources can be removed from an enterprise project that the resources belong to in the following two scenarios:
+
- Resources are removed from one enterprise project to another project.
- Resources are removed from one enterprise project to the default enterprise project.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - Click View Resource in the Operation column of the row containing the target enterprise project.
The enterprise project details page is displayed. You can view the resources in the enterprise project on the Resources tab.
+Figure 1 Viewing resources
+ - Select the resources to be removed, and click Remove.
The Remove Resource dialog box is displayed.
+ - Select a mode.
- Independent resources: Each resource is removed as an independent resource. You can remove multiple independent resources at the same time.
If resources other than ECSs need to be added, you must select this mode.
+You can select this mode to remove ECSs from the enterprise project, but resources associated with the ECSs, such as EIPs and EVS disks, are not removed from the enterprise project.
+ - ECSs and ECS associated resources: You only need to select the ECSs to be removed, and the resources associated with the ECSs will be automatically removed from the enterprise project at the same time.
This mode is available only when the resources to be removed are ECSs. Currently, only ECSs and their associated EVS disks and EIPs can be removed from an enterprise project at the same time.
+
+ - Select the destination enterprise project that resources are removed to and click OK.
Resources removed can be added to and managed in other enterprise projects.
+Resources can also be added into the default enterprise project if they do not need to be added into other projects.
+The resources are removed from the enterprise project. You can view the resources in the resource list of the destination enterprise project.
+Figure 2 Removing resources
+
+
+
Viewing Migration Events
+Scenarios
You can view details of migration events, including time, operator, operation, resource ID, source enterprise project, and destination enterprise project of each event.
+
+
Limitations and Constraints
Events in the last seven days can be queried.
+
To view migration events, you must have the administrator permission.
+
+
Procedure
- On the management console, click username in the upper right corner and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - In the upper left of the enterprise project list, click View Migration Event.
The Migration Events page is displayed, listing the resource adding and removal events.
+Figure 1 View Migration Event
+
+
+
Enterprise Personnel Management
+
+
+
diff --git a/docs/eps/umn/em_01_0031.html b/docs/eps/umn/em_01_0031.html
new file mode 100644
index 000000000..8882525ec
--- /dev/null
+++ b/docs/eps/umn/em_01_0031.html
@@ -0,0 +1,27 @@
+
+
+Change History
+
+
Released On
+ |
+Description
+ |
+
|---|
+
+2025-08-21
+ |
+This issue is the second official release.
+The following changes are incorporated:
+Removed the Bandwidth parameter from the "Supported Services" section.
+ |
+
+2024-06-30
+ |
+This issue is the first official release.
+ |
+
+
+
+
+
FAQs
+
+
+
diff --git a/docs/eps/umn/em_01_0035.html b/docs/eps/umn/em_01_0035.html
new file mode 100644
index 000000000..c6ff434f8
--- /dev/null
+++ b/docs/eps/umn/em_01_0035.html
@@ -0,0 +1,23 @@
+
+
+What Are the Differences Between IAM and Enterprise Management
+Enterprise Management enables enterprises to manage cloud resources at the organization and project levels. Enterprise Management mainly provides project management, personnel management, and resource management.
+
Identity and Access Management (IAM) is an identity management service that provides identity authentication, permissions management, and access control.
+
Both IAM and Enterprise Management can be used to manage users and access permissions. However, Enterprise Management supports more fine-grained resource permissions management than IAM. Enterprise Management is recommended for medium- and large-sized enterprises.
+
For more information about IAM features, see Identity and Access Management User Guide.
+
Differences Between IAM and Enterprise Management
- Enabling method
- IAM can be used free of charge immediately upon successful account registration.
- Enterprise Management can be used free of charge immediately upon successful account registration.
+ - Resource isolation
- Using IAM, you can create multiple projects in a region to isolate resources and authorize users to access resources in specific projects.
- Using Enterprise Management, you can create enterprise projects to isolate resources across regions. Enterprise Management makes it easy to assign permissions for specific cloud resources. For example, you can add an Elastic Cloud Server (ECS) to an enterprise project, and assign permissions to a user for it to manage the ECS in the project. The user then can manage only this ECS.
+
+
+
Authentication Process
When a user initiates an access request, the system authenticates the request based on the actions in the policies attached to the group to which the user belongs. The following figure shows the authentication process.
+
Figure 1 Request authentication process
+
+
- A user initiates an access request.
- The system looks for IAM project policies and then looks for matched actions in the policies.
- If a matched Allow or Deny action is found, the system returns an authentication result (Allow or Deny). Then the authentication is finished.
- If no matched actions are found in IAM project policies, the system continues to look for enterprise project policies and matched actions.
- If a matched Allow or Deny action is found, the system returns an authentication result (Allow or Deny). Then the authentication is finished.
- If no matched actions are found, the system returns a Deny. Then the authentication is finished.
+
+
What Are the Differences Between IAM Projects and Enterprise Projects?
+IAM Projects
IAM projects group and physically isolate resources in the same region.
+
Resources cannot be transferred between IAM projects, but can only be deleted and then rebuilt.
+
+
+
Enterprise Projects
Enterprise projects group, manage, and logically isolate resources of an enterprise in all regions.
+
An enterprise project can contain resources in multiple regions, and resources can be directly transferred between enterprise projects.
+
You cannot create projects in IAM after enabling Enterprise Management.
+
+
+
How Can I Access All Enterprise Projects?
+Generally, a user can only view the enterprise projects on which the user has permissions. To view all enterprise projects, a user must:
+
- Be an administrator.
- Be an IAM user with a global authorization policy granted by the enterprise administrator.
+
How Do I Obtain an Enterprise Project ID?
+- By calling an API
Cloud services can be authorized by IAM to call the API that is used to query a list of enterprise projects. The returned project list contains the ID of each enterprise project. For details about the APIs, see Enterprise Project Management Service API Reference.
+ - From the enterprise project details page.
The procedure is as follows:
+- Sign in to the management console, click the account name in the upper right corner, and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - Click the name of the target enterprise project to view its ID on the displayed details page.
Figure 1 Obtaining the ID of an Enterprise Project
+
+
+
Recording TMS Operations Using CTS
+
+
+
diff --git a/docs/eps/umn/em_01_0046.html b/docs/eps/umn/em_01_0046.html
new file mode 100644
index 000000000..e54e12c07
--- /dev/null
+++ b/docs/eps/umn/em_01_0046.html
@@ -0,0 +1,88 @@
+
+
+Key TMS Operations
+Table 1 lists the enterprise project operations that will be recorded by CTS.
+
+
Table 1 EPS operations recorded by CTSOperation
+ |
+Resource Type
+ |
+Trace Name
+ |
+
|---|
+
+Creating an enterprise project
+ |
+enterpriseProject
+ |
+createEnterpriseProject
+ |
+
+Modifying an enterprise project
+ |
+enterpriseProject
+ |
+modifyEnterpriseProject
+ |
+
+Disabling an enterprise project
+ |
+enterpriseProject
+ |
+disableEnterpriseProject
+ |
+
+Enabling an enterprise project
+ |
+enterpriseProject
+ |
+enableEnterpriseProject
+ |
+
+Migrating resources
+ NOTE: You can perform this operation by calling an API. Currently, EPS console does not support this operation.
+
+ |
+enterpriseProjectResource
+ |
+migrate
+ |
+
+Removing resources and their associated resources
+ |
+enterpriseProjectResource
+ |
+associatedMigrateOut
+ |
+
+Adding resources and their associated resources
+ |
+enterpriseProjectResource
+ |
+associatedMigrateIn
+ |
+
+Adding resources to an enterprise project.
+ |
+enterpriseProjectResource
+ |
+migrateIn
+ |
+
+Removing resources
+ |
+enterpriseProjectResource
+ |
+migrateOut
+ |
+
+
+
+
+
Viewing CTS Traces in the Trace List
+Scenarios
Cloud Trace Service (CTS) records operations performed on cloud service resources. A record contains information such as the user who performed the operation, IP address, operation content, and returned response message. These records facilitate security auditing, issue tracking, and resource locating. They also help you plan and use resources, and identify high-risk or non-compliant operations.
+
+
What Is a Trace?
A trace is an operation log for a cloud service resource, tracked and stored by CTS. Traces record operations such as adding, modifying, or deleting cloud service resources. You can view them to identify who performed operations and when for detailed tracking.
+
+
Viewing Traces in the Trace List
- Log in to the management console, click
in the upper left corner, and choose Management & Deployment > Cloud Trace Service. - In the navigation pane, choose Trace List.
- In the upper right corner of the page, set a desired query time range: Last 1 hour, Last 1 day, or Last 1 week. You can also click Customize to specify a custom time range within the last seven days.
- Set filters to search for your desired traces, as shown in Figure 1.
Figure 1 Filters
+
+Table 1 Trace filtering parametersParameter
+ |
+Description
+ |
+
|---|
+
+Trace Type
+ |
+Select Management or Data.
+- Management traces record operations performed by users on cloud service resources, including creation, modification, and deletion.
- Data traces are reported by OBS and record operations performed on data in OBS buckets, including uploads and downloads.
+ |
+
+Trace Source
+ |
+Select the name of the cloud service that triggers a trace from the drop-down list.
+ |
+
+Resource type
+ |
+Select the type of the resource involved in a trace from the drop-down list.
+For details about the resource types of each cloud service, see section "Supported Services and Operations" in the Cloud Trace Service User Guide.
+ |
+
+Search By
+ |
+Select one of the following options:
+- Resource ID: ID of the cloud resource involved in a trace.
Leave this field empty if the resource has no resource ID or if resource creation failed.
+ - Trace name: name of a trace.
For details about the operations that can be audited for each cloud service, see section "Supported Services and Operations" in the Cloud Trace Service User Guide.
+ - Resource name: name of the cloud resource involved in a trace.
If the cloud resource involved in the trace does not have a resource name or the corresponding API operation does not involve the resource name parameter, leave this field empty.
+
+ |
+
+Operator
+ |
+User who triggers a trace.
+Select one or more operators from the drop-down list.
+If the value of trace_type in a trace is SystemAction, the operation is triggered by the service and the trace's operator may be empty.
+ |
+
+Trace Status
+ |
+Select one of the following options:
+- Normal: The operation succeeded.
- Warning: The operation failed.
- Incident: The operation caused a fault that is more serious than a normal failure, for example, causing other faults.
+ |
+
+
+
+
- Click Query.
- On the Trace List page, you can also export and refresh the trace list.
- Click Export to export all traces in the query result as a CSV file. The file can contain up to 5,000 records.
- Click
to view the latest information about traces.
+ - Click
on the left of a trace to expand its details.
+
+
+ - Click View Trace in the Operation column. The trace details are displayed.
+
+
+
+
What Is Enterprise Project Management Service?
+Overview
Enterprise Project Management Service (EPS) provides a cloud governance platform. It allows an enterprise to manage personnel, resources, and permissions based on their organizational structure and service management models.
+
+
Multi-project Management
+
+
+
diff --git a/docs/eps/umn/em_eps_04_0100.html b/docs/eps/umn/em_eps_04_0100.html
new file mode 100644
index 000000000..f7523f816
--- /dev/null
+++ b/docs/eps/umn/em_eps_04_0100.html
@@ -0,0 +1,73 @@
+
+
+Scenario
+Company A is an enterprise user and has multiple project teams that require different resources and personnel. This topic presents the best practice for multi-project management to address company A's requirements.
+
Requirements
- Requirement 1: Company A can create multiple types of resources in region_01 and region_02 for two project teams. Resources of the two project teams need to be isolated from each other.
- Requirement 2: Each member of the project teams can access only the resources of the project team to which the member belongs, and only has the permissions required to complete tasks.
+
+
Solution
- Solution to requirement 1: Enterprise Management and Identity and Access Management (IAM) are two cloud services that can isolate resources between projects. However, the implementation logic and functions of the two services are different.
- Enterprise Management: You can create enterprise projects to group and manage resources across regions. Resources in enterprise projects are logically isolated from each other. Each enterprise project can contain resources of multiple regions, and resources can be added to or removed from enterprise projects.
- IAM: IAM projects group and physically isolate resources in a region, and each IAM project can only contain resources in the same region. Resources cannot be transferred between IAM projects.
+
+
In conclusion, Enterprise Management provides more flexible cross-region resource isolation between projects than IAM. Therefore, it is recommended that company A use Enterprise Management to manage project resources. The solutions to the following requirements are proposed using the Enterprise Management service. For details about the two services, see
What Are the Differences Between IAM and Enterprise Management.
- Solution to requirement 2: In IAM, company A creates IAM users for employees and adds the IAM users to different groups. In Enterprise Management, company A adds the user groups to the enterprise projects created to address Requirement 1 and assigns required resource access permissions (see Table 1) to each user group.
Figure 1 Personnel management model of company A
+
+
Table 1 User group permissions in company AUser Group
+ |
+Responsibility
+ |
+Permissions
+ |
+Description
+ |
+
|---|
+
+Development team
+ |
+Project development
+ |
+ELB FullAccess
+ |
+Full permissions for Elastic Load Balance (ELB)
+ |
+
+OBS Administrator
+ |
+Full permissions for Object Storage Service (OBS)
+ |
+
+EPS Admin
+ |
+Full permissions for Enterprise Management
+ |
+
+Security maintenance team
+ |
+Security O&M of the project
+ |
+ECS CommonOperations
+ |
+Permissions for basic ECS operations
+ |
+
+Operations team
+ |
+Overall operations of the project
+ |
+EPS Admin
+ |
+Full permissions for Enterprise Management, including modifying, enabling, disabling, and viewing enterprise projects
+ |
+
+
+
+
+
+
+
+
+
Procedure
+The following figure illustrates the process of enterprise project management for addressing company A's requirements.
+
Figure 1 Enterprise project management process
+
Step 1: Create enterprise projects on the Enterprise Management console.
+
Step 2: On the IAM console, create a user group for each functional team, create IAM users for employees, and add the users to different user groups.
+
Step 3: On the IAM console, assign the required permissions to each user group, and add the user group to the corresponding enterprise project. Users in the group automatically inherit its permissions.
+
Step 4: Create resources on other cloud service consoles and add the resources to the corresponding enterprise projects.
+
Follow-Up Operation: Enterprise Project Management: Manage users and resources on the Enterprise Management console.
+
Creating an Enterprise Project
Perform the following procedure to create two enterprise projects (A and B) on the Enterprise Management console.
+
- On the Enterprise Project Management page, click Create Enterprise Project.
- Enter EnterpriseProject_A for Name and click OK.
Figure 2 Creating an enterprise project
+ - Repeat 1 to 2 to create EnterpriseProject_B.
The two enterprise projects are displayed on the Enterprise Project Management page.
+
+
+
Creating IAM Users and User Groups
The following is an example procedure for creating a user group (Enterprise Project A_Development) and user (Murphy) and adding the user to the user group.
+
- Create a user group.
- On the management console, click
in the upper left corner and choose Management & Deployment > Identity and Access Management. - On the IAM console, choose User Groups from the left navigation bar, and click Create User Group in the upper right corner.
+Figure 3 Creating a user group
+- Set the user group name to Enterprise Project A_Development and click OK.
- Repeat 2 to 3 to create accounting, security maintenance, and operation teams for the two enterprise projects.
+The user groups are displayed in the user group list.
+ - Create an IAM user and add the user to a user group. For details, see Identity and Access Management User Guide.
- In the left navigation of the IAM console, choose Users. Then click Create User.
Figure 4 Creating an IAM user
+
- On the Create User page, enter user information, select Access Type, Credential Type, and Login Protection, and click Next.
Figure 5 Setting user details
+
- Enter the target user group to add the user. Then the user will inherit permissions from the group. Click Create and the IAM user Murphy is created.
Figure 6 Adding users to a user group
+
- Repeat 1 to 3 to create users for all employees and add the users to corresponding user groups.
+The user is displayed in the user list. You can view the IAM users of each user group on the Users tab page.
+
+
+
Adding User Groups to Enterprise Projects
The following example shows how to associate the Enterprise Project A_Development user group with a project and how to add the EPS Admin policy to the user group. In this way, users in Enterprise Project A_Development can access the project.
+
- On the Enterprise Project Management Service page, click the name of the enterprise project you want to view.
- On the enterprise project details page that is displayed, click the Permissions tab, and click Authorize User Group.
The IAM User Groups page will be displayed, and you can assign EPS Admin.
+For details, see Creating a User Group and Assigning Permissions.
+Figure 7 Authorize User Group
+
+
+
Creating Resources and Adding Them to Enterprise Projects
The following is an example procedure for creating a load balancer and adding it to enterprise project A.
+
- Log in to the management console, click
in the upper left corner, and choose . - Click Create Elastic Load Balance in the upper right corner of the page.
Figure 8 Creating a load balancer
+ - Configure the load balancer information and select enterprise project A from the Enterprise Project drop-down list.
Figure 9 Selecting an enterprise project
+ - Click Create Now in the lower right corner of the page.
- Confirm the configuration and submit your request.
- Repeat 1 to 5 to create required resources for the two enterprise projects.
To view the created resources, go to the Enterprise Management console and click View Resource in the row that contains enterprise project A or B.
+
+
+
+
Follow-Up Operation: Enterprise Project Management
After completing the preceding steps, you can manage your enterprise projects on the Enterprise Project Management page.
+
- Resource management: Click View Resource in the Operation column to view the existing resources of an enterprise project and add more resources to the enterprise project.
- Personnel management: Choose Permissions to go to the IAM console to view the users and user groups associated with an enterprise project, and modify the users, user groups and their permissions for the enterprise project. For details about personnel management, see Enterprise Personnel Management.
+
+
How Many Enterprise Projects Can I Create?
+By default, you can create up to 100 enterprise projects.
+
If the default quota cannot meet your requirements, you can How Do I Apply for a Higher Quota?.
+
Disabled enterprise projects are still counted towards your enterprise project quota. If your enterprise project quota is insufficient, you can enable the disabled enterprise projects before applying for a higher quota.
+
+
Will Adding or Removing a Resource from an Enterprise Project Change the VPC and Related IPs of the Resource?
+No.
+
Transferring resources between enterprise projects may affect resource access for users that are added to the projects. It will not change the VPC or related IPs of the resource.
+
Transferring a resource between enterprise projects does not affect the resource itself. For example, the transferring will not cause an instance to restart, change network configurations, or change the ownership of resources.
+
However, if you grant resource access based on enterprise projects, users may be affected to access related resources. For example, if you grant a user only the permissions to access resources of project A, after the resources are transferred to project B, the user may fail to access the resources due to insufficient permissions.
+
Viewing Enterprise Project Authorization Records
+Scenario
You can centrally manage all authorization records of your enterprise projects on the authorization management page of IAM.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - On the Enterprise Project Management Service page, locate the enterprise project you want to view and click Permissions in the Operation column.
- On the IAM Authorization page that is displayed, click By Enterprise Project to view authorization records of each enterprise project.
- Click the user or user group name in the Principal column to view details about a user or user group.
Figure 1 Viewing authorization records of enterprise projects
+
+
+
Removing a User Group from an Enterprise Project
+Scenario
You can remove user groups from enterprise projects as needed.
+
Batch operations are supported.
+
After a user group is disassociated from an enterprise project, they can no longer manage the project.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - On the Enterprise Project Management Service page, click the name of the enterprise project you want to view.
- On the enterprise project details page that is displayed, click the Permissions tab, and click Authorize User Group.
Figure 1 Authorize User Group
+ - On the IAM User Groups page that is displayed, click the user group name to go to the user group details page.
Figure 2 User Groups
+ - On the Permissions tab, click By Enterprise Project, select the target enterprise project, and click Delete in the Operation column.
To delete enterprise projects in batches, select the enterprise projects in the list and click Delete above the list.
+Figure 3 Deleting an enterprise project from a user group
+ - In the displayed dialog box, click OK.
The enterprise projects that are managed by the user group are deleted.
+
+
+
Authorizing a User Group to Manage an Enterprise Project
+Scenario
You can authorize user groups to manage enterprise projects, and users will inherit permissions from their user groups. The following procedure shows how to authorize a user group to manage an enterprise project.
+
+
Procedure
- Sign in to the management console. In the upper right corner, hover over the account name and choose Enterprise Management from the drop-down list.
The Enterprise Project Management page is displayed.
+ - On the Enterprise Project Management Service page, click the name of the enterprise project you want to view.
- On the enterprise project details page that is displayed, click the Permissions tab, and click Authorize User Group.
The IAM User Groups page is displayed. Select a user group and authorize the user group to manage the enterprise project.
+For details, see Creating a User Group and Assigning Permissions.
+Figure 1 Authorize User Group
+
+
+