forked from docs/doc-exports
zhangyue
19668ae97b
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com> Co-authored-by: zhangyue <zhangyue164@huawei.com> Co-committed-by: zhangyue <zhangyue164@huawei.com>
23 lines
4.6 KiB
HTML
23 lines
4.6 KiB
HTML
<a name="obs_03_0304"></a><a name="obs_03_0304"></a>
|
|
|
|
<h1 class="topictitle1">Configuring User Permissions</h1>
|
|
<div id="body1499753333225"><p id="obs_03_0304__p77331243113019">If your cloud service account does not need individual IAM users, then you may skip this section. Your permissions to use OBS functions are not affected.</p>
|
|
<p id="obs_03_0304__p783465223215">OBS is separately deployed from other cloud resources. If IAM users are required, you need to grant them access permissions for OBS.</p>
|
|
<div class="section" id="obs_03_0304__section12521716448"><h4 class="sectiontitle">Process</h4><div class="fignone" id="obs_03_0304__obs_03_0122_fig292324264713"><span class="figcap"><b>Figure 1 </b>Process of granting an IAM user the OBS permissions</span><br><span><img id="obs_03_0304__obs_03_0122_image12924124212474" src="en-us_image_0170301902.png"></span></div>
|
|
</div>
|
|
<div class="section" id="obs_03_0304__section1056019017457"><h4 class="sectiontitle">Procedure</h4><ol id="obs_03_0304__obs_03_0122_ol63831030102"><li id="obs_03_0304__obs_03_0122_li35354147174321"><span>Log in to the management console with your account.</span></li><li id="obs_03_0304__obs_03_0122_li5853192561010"><span>On the top menu bar, choose <strong id="obs_03_0304__obs_03_0122_b149371518121613">Service List</strong> > <strong id="obs_03_0304__obs_03_0122_b29379189163">Management & Deployment</strong> > <strong id="obs_03_0304__obs_03_0122_b1293761819168">Identity and Access Management</strong>. The IAM console is displayed.</span></li><li id="obs_03_0304__obs_03_0122_li257313485116"><span>Create a user group and assign OBS permissions to it.</span><p><div class="p" id="obs_03_0304__obs_03_0122_p371751915195">A user group is a collection of users. By assigning permissions to a user group, you assign permissions to the users in this group. After you create an IAM user, add it to one or more user groups, so that it can inherit the permissions from the groups.<ol type="a" id="obs_03_0304__obs_03_0122_ol28671118201912"><li id="obs_03_0304__obs_03_0122_li78661718151913">In the navigation pane, choose <strong id="obs_03_0304__obs_03_0122_b0624202611174">User Groups</strong>. The <strong id="obs_03_0304__obs_03_0122_b8624112618178">User Groups</strong> page is displayed.</li><li id="obs_03_0304__obs_03_0122_li286617189195">Click <span class="uicontrol" id="obs_03_0304__obs_03_0122_uicontrol230942777211457"><b>Create User Group</b></span>.</li><li id="obs_03_0304__obs_03_0122_li1886641801917">Enter a user group name and click <strong id="obs_03_0304__obs_03_0122_b779483571714">OK</strong>.<p id="obs_03_0304__obs_03_0122_p3866171841910">The user group is displayed in the user group list once the creation is complete.</p>
|
|
</li><li id="obs_03_0304__obs_03_0122_li311581884917">Locate the user group you created and click <strong id="obs_03_0304__obs_03_0122_b1744115810271">Authorize</strong> in the <strong id="obs_03_0304__obs_03_0122_b114418583272">Operation</strong> column of the row.</li><li id="obs_03_0304__obs_03_0122_li568211294519">Under <strong id="obs_03_0304__obs_03_0122_b8468111954120">Select Policy/Role</strong>, filter policies based on policy types in the upper right corner, required policy names, and click <strong id="obs_03_0304__obs_03_0122_b107938915423">Next</strong>.</li><li id="obs_03_0304__obs_03_0122_li4809331627">Under <strong id="obs_03_0304__obs_03_0122_b028715994011">Select Scope</strong>, select <strong id="obs_03_0304__obs_03_0122_b14770144621412">Global services</strong> and click <strong id="obs_03_0304__obs_03_0122_b14755135561415">OK</strong>.<div class="note" id="obs_03_0304__obs_03_0122_note1180913318215"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="obs_03_0304__obs_03_0122_p581011315218">In the policy content area, you can view the authorization details.</p>
|
|
<p id="obs_03_0304__obs_03_0122_p58101831229">Due to data caching, an RBAC policy or a fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user or a user group.</p>
|
|
</div></div>
|
|
</li></ol>
|
|
</div>
|
|
</p></li><li id="obs_03_0304__obs_03_0122_li7964155918166"><span>Create an IAM user. For details, see section "Creating an IAM User" in the <em id="obs_03_0304__obs_03_0122_i1898610457585">Identity and Access Management User Guide</em>.</span></li><li id="obs_03_0304__obs_03_0122_li193181327107"><span>Use the created IAM user to log in to OBS Console and verify the user permissions.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0302.html">Getting Started</a></div>
|
|
</div>
|
|
</div>
|
|
|