Files
doc-exports/docs/iam/umn/CLASS.TXT.json
Wei, Hongmin 25e8bdf969 IAM UMN 0815 Version
Reviewed-by: Belejkanic, Lukas <lukas.belejkanic@t-systems.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2023-08-21 13:27:54 +00:00

758 lines
30 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

[
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Service Overview",
"uri":"iam_01_0021.html",
"doc_type":"usermanual",
"p_code":"",
"code":"1"
},
{
"desc":"Identity and Access Management (IAM) provides identity authentication, permissions management, and access control. With IAM, you can create users for individuals, systems",
"product_code":"iam",
"title":"What Is IAM?",
"uri":"iam_01_0026.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"2"
},
{
"desc":"IAM provides the following basic functions:Refined permissions managementYou can control user access to different projects and grant different permissions to users for th",
"product_code":"iam",
"title":"IAM Features",
"uri":"en-us_topic_0046611276.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"3"
},
{
"desc":"You can manage users in your account and their security credentials. In addition, you can configure identity federation so that users in other systems can access the clou",
"product_code":"iam",
"title":"Identity Management",
"uri":"iam_01_0023.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"4"
},
{
"desc":"You can grant users permissions to access different resources.Plan user groups and grant permissions to each user group.Add a user to a specific user group so that the us",
"product_code":"iam",
"title":"Permissions Management",
"uri":"iam_01_0024.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"5"
},
{
"desc":"To prevent personal data, such as the username, password, and mobile number, from being accessed by unauthorized entities or individuals, IAM encrypts the data before sto",
"product_code":"iam",
"title":"Personal Data Protection Mechanism",
"uri":"iam_01_0035.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"6"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Getting Started",
"uri":"iam_01_0027.html",
"doc_type":"usermanual",
"p_code":"",
"code":"7"
},
{
"desc":"Your account has full access to your resources. For security purposes, create a security administrator and perform routine management as the security administrator.If a u",
"product_code":"iam",
"title":"Getting Started with IAM",
"uri":"iam_01_0034.html",
"doc_type":"usermanual",
"p_code":"7",
"code":"8"
},
{
"desc":"For security purposes, create a security administrator and manage users in your account as the security administrator.Programmatic access: Users can access cloud services",
"product_code":"iam",
"title":"Creating a Security Administrator",
"uri":"iam_07_0002.html",
"doc_type":"usermanual",
"p_code":"7",
"code":"9"
},
{
"desc":"As a security administrator, you can create user groups and grant them permissions.To enable users to directly view their permissions, set a description for the user grou",
"product_code":"iam",
"title":"Creating a User Group and Assigning Permissions",
"uri":"iam_01_0030.html",
"doc_type":"usermanual",
"p_code":"7",
"code":"10"
},
{
"desc":"As a security administrator, you can create a user and add the user to a user group. The user automatically inherits the permissions of the user group.For security purpos",
"product_code":"iam",
"title":"Creating a User and Adding the User to a User Group",
"uri":"iam_01_0031.html",
"doc_type":"usermanual",
"p_code":"7",
"code":"11"
},
{
"desc":"You can log in to the cloud platform as an IAM user and access cloud services based on granted permissions.If either of the following has been configured on Security Sett",
"product_code":"iam",
"title":"Logging In as an IAM User",
"uri":"iam_01_0032.html",
"doc_type":"usermanual",
"p_code":"7",
"code":"12"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"User Guide",
"uri":"iam_01_0040.html",
"doc_type":"usermanual",
"p_code":"",
"code":"13"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"IAM Users",
"uri":"iam_01_06.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"14"
},
{
"desc":"If you need to share resources in your account to other users, you can create users by using the console or by calling an API, and set security credentials and required p",
"product_code":"iam",
"title":"Creating a User",
"uri":"en-us_topic_0046611303.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"15"
},
{
"desc":"IAM users created without being added to any groups do not have permissions. You can assign permissions to these IAM users on the IAM console. After authorization, the us",
"product_code":"iam",
"title":"Assigning Permissions to an IAM User",
"uri":"en-us_topic_0079496985.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"16"
},
{
"desc":"You can log in to the console as an IAM user or obtain the IAM user login link from the administrator and then use the link to log in.Domain name: The name of the account",
"product_code":"iam",
"title":"Logging In as an IAM User",
"uri":"iam_01_0552.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"17"
},
{
"desc":"You can modify the user information, including the status, access type, description, external identity ID, and belonged user group.If the job responsibilities of a user a",
"product_code":"iam",
"title":"Viewing and Modifying User Information",
"uri":"en-us_topic_0046661675.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"18"
},
{
"desc":"After an IAM user is deleted, they can no longer log in and their username, password, access keys, and authorizations will be cleared and cannot be recovered.Make sure th",
"product_code":"iam",
"title":"Deleting an IAM User",
"uri":"iam_02_0004.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"19"
},
{
"desc":"As an administrator, you can reset the password of an IAM user if the user has forgotten the password and no email address or mobile number has been bound to the user.To ",
"product_code":"iam",
"title":"Changing the Login Password of an IAM User",
"uri":"iam_01_0653.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"20"
},
{
"desc":"You can modify user permissions using either of the following methods:Change the user groups to which a user belongs on the Modify User page. Choose this method if you wa",
"product_code":"iam",
"title":"Modifying User Permissions",
"uri":"en-us_topic_0080335069.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"21"
},
{
"desc":"Resources in different projects or regions are isolated. You can access resources only in the projects or regions for which you have been granted permissions. If you do n",
"product_code":"iam",
"title":"Switching Projects or Regions",
"uri":"en-us_topic_0079497018.html",
"doc_type":"usermanual",
"p_code":"14",
"code":"22"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"User Groups and Authorization",
"uri":"iam_01_0655.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"23"
},
{
"desc":"You can plan user groups based on user responsibilities and grant the required permissions to the user groups. Users inherit permissions from the user groups to which the",
"product_code":"iam",
"title":"Creating a User Group and Assigning Permissions",
"uri":"en-us_topic_0046611269.html",
"doc_type":"usermanual",
"p_code":"23",
"code":"24"
},
{
"desc":"A user inherits permissions from the groups to which the user belongs. To change the permissions of a user, add the user to a new group or remove the user from an existin",
"product_code":"iam",
"title":"Adding Users to or Removing Users from a User Group",
"uri":"iam_03_0002.html",
"doc_type":"usermanual",
"p_code":"23",
"code":"25"
},
{
"desc":"To delete a user group, do the following:To delete multiple user groups at a time, do the following:",
"product_code":"iam",
"title":"Deleting a User Group",
"uri":"iam_01_0430.html",
"doc_type":"usermanual",
"p_code":"23",
"code":"26"
},
{
"desc":"As a security administrator, you can view and modify the basic information, permissions, and users of a user group. You can modify users' permissions by changing the grou",
"product_code":"iam",
"title":"Viewing and Modifying User Group Information",
"uri":"en-us_topic_0085605493.html",
"doc_type":"usermanual",
"p_code":"23",
"code":"27"
},
{
"desc":"To revoke a policy or role attached to a user group, do the following:To revoke multiple policies or roles attached to a user group, do as follows:",
"product_code":"iam",
"title":"Revoking Permissions of a User Group",
"uri":"iam_03_0004.html",
"doc_type":"usermanual",
"p_code":"23",
"code":"28"
},
{
"desc":"Cloud services interwork with each other. Roles of some services take effect only if they are assigned along with roles of other services.For example, the DNS Administrat",
"product_code":"iam",
"title":"Assigning Dependency Roles",
"uri":"iam_01_0657.html",
"doc_type":"usermanual",
"p_code":"23",
"code":"29"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Permissions",
"uri":"iam_01_0015.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"30"
},
{
"desc":"By default, new IAM users do not have permissions assigned. You need to add a user to one or more groups, and attach permissions policies or roles to these groups. Users ",
"product_code":"iam",
"title":"Basic Concepts",
"uri":"iam_01_019.html",
"doc_type":"usermanual",
"p_code":"30",
"code":"31"
},
{
"desc":"Roles are a type of coarse-grained authorization mechanism that defines service-level permissions based on user responsibilities. IAM provides a limited number of roles f",
"product_code":"iam",
"title":"Roles",
"uri":"iam_01_0601.html",
"doc_type":"usermanual",
"p_code":"30",
"code":"32"
},
{
"desc":"A fine-grained policy consists of the policy version (the Version field) and statement (the Statement field).Version: Distinguishes between role-based access control (RBA",
"product_code":"iam",
"title":"Policy Syntax",
"uri":"iam_01_0017.html",
"doc_type":"usermanual",
"p_code":"30",
"code":"33"
},
{
"desc":"You can create custom policies to supplement system-defined policies and implement more refined access control.Global services: Select this option if the services to whic",
"product_code":"iam",
"title":"Creating a Custom Policy",
"uri":"iam_01_0016.html",
"doc_type":"usermanual",
"p_code":"30",
"code":"34"
},
{
"desc":"Use the following method to assign permissions of the FullAccess policy to a user but also forbid the user from accessing CTS. Create a custom policy for denying access t",
"product_code":"iam",
"title":"Custom Policy Use Cases",
"uri":"iam_01_0600.html",
"doc_type":"usermanual",
"p_code":"30",
"code":"35"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Security Settings",
"uri":"en-us_topic_0046611308.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"36"
},
{
"desc":"You can configure the account settings, critical operation protection, login authentication policy, password policy, and access control list (ACL) on the Security Setting",
"product_code":"iam",
"title":"Security Settings Overview",
"uri":"iam_07_0001.html",
"doc_type":"usermanual",
"p_code":"36",
"code":"37"
},
{
"desc":"As an account administrator, both you and your IAM users can manage basic information on this page.A mobile number or an email address can be bound only to one account or",
"product_code":"iam",
"title":"Basic Information",
"uri":"iam_01_0703.html",
"doc_type":"usermanual",
"p_code":"36",
"code":"38"
},
{
"desc":"Only an administrator can configure critical operation protection, and IAM users can only view the configurations. If an IAM user needs to modify the configurations, the ",
"product_code":"iam",
"title":"Critical Operation Protection",
"uri":"iam_01_0029.html",
"doc_type":"usermanual",
"p_code":"36",
"code":"39"
},
{
"desc":"The Login Authentication Policy tab of the Security Settings page provides the Session Timeout, Account Lockout, Recent Login Information, Recent Login Information, and C",
"product_code":"iam",
"title":"Login Authentication Policy",
"uri":"iam_01_0704.html",
"doc_type":"usermanual",
"p_code":"36",
"code":"40"
},
{
"desc":"The Password Policy tab of the Security Settings page provides the Password Composition & Reuse, Password Expiration, and Minimum Password Age settings.Only the administr",
"product_code":"iam",
"title":"Password Policy",
"uri":"iam_01_0607.html",
"doc_type":"usermanual",
"p_code":"36",
"code":"41"
},
{
"desc":"The ACL tab of the Security Settings page provides the IP Address Ranges, IPv4 CIDR Blocks, and VPC Endpoints settings for allowing user access only from specified IP add",
"product_code":"iam",
"title":"ACL",
"uri":"iam_07_0003.html",
"doc_type":"usermanual",
"p_code":"36",
"code":"42"
},
{
"desc":"Projects are used to group and isolate OpenStack resources, including compute, storage, and network resources. A project can be a department or a project team. Resources ",
"product_code":"iam",
"title":"Projects",
"uri":"en-us_topic_0066738518.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"43"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Agencies",
"uri":"en-us_topic_0079496986.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"44"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Account Delegation",
"uri":"iam_01_0054.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"45"
},
{
"desc":"The agency function enables you to delegate another account to implement O&M on your resources based on assigned permissions.You can delegate resource access only to acco",
"product_code":"iam",
"title":"Delegating Resource Access to Another Account",
"uri":"iam_06_0001.html",
"doc_type":"usermanual",
"p_code":"45",
"code":"46"
},
{
"desc":"By creating an agency, you can share your resources with another account, or delegate an individual or team to manage your resources. You do not need to share your securi",
"product_code":"iam",
"title":"Creating an Agency (by a Delegating Party)",
"uri":"en-us_topic_0046613147.html",
"doc_type":"usermanual",
"p_code":"45",
"code":"47"
},
{
"desc":"When a trust relationship is established between your account and another account, you become a delegated party. By default, only your account and the members of the admi",
"product_code":"iam",
"title":"(Optional) Assigning Permissions to an IAM User (by a Delegated Party)",
"uri":"iam_01_0063.html",
"doc_type":"usermanual",
"p_code":"45",
"code":"48"
},
{
"desc":"When an account establishes a trust relationship with your account, you become a delegated party. You and all the users you have authorized can switch to the delegating a",
"product_code":"iam",
"title":"Switching Roles (by a Delegated Party)",
"uri":"en-us_topic_0046613148.html",
"doc_type":"usermanual",
"p_code":"45",
"code":"49"
},
{
"desc":"Services on the cloud platform interwork with each other, and some cloud services are dependent on other services. To delegate a cloud service to access other services an",
"product_code":"iam",
"title":"Cloud Service Delegation",
"uri":"iam_06_0004.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"50"
},
{
"desc":"To modify the permissions, validity period, and description of an agency, click Modify in the row containing the agency you want to modify.You can change the cloud servic",
"product_code":"iam",
"title":"Deleting or Modifying Agencies",
"uri":"iam_01_0730.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"51"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Identity Providers",
"uri":"en-us_topic_0059870089.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"52"
},
{
"desc":"The cloud platform provides identity federation based on Security Assertion Markup Language (SAML) or OpenID Connect. This function allows users in your enterprise manage",
"product_code":"iam",
"title":"Introduction",
"uri":"en-us_topic_0079620341.html",
"doc_type":"usermanual",
"p_code":"52",
"code":"53"
},
{
"desc":"IAM supports two SSO types: virtual user SSO and IAM user SSO. This section describes the two SSO types and their differences, helping you to choose an appropriate type f",
"product_code":"iam",
"title":"Application Scenarios of Virtual User SSO and IAM User SSO",
"uri":"iam_08_0251.html",
"doc_type":"usermanual",
"p_code":"52",
"code":"54"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Virtual User SSO via SAML",
"uri":"iam_08_0002.html",
"doc_type":"usermanual",
"p_code":"52",
"code":"55"
},
{
"desc":"The cloud platform supports identity federation with Security Assertion Markup Language (SAML), which is an open standard that many identity providers (IdPs) use. During ",
"product_code":"iam",
"title":"Overview of Virtual User SSO via SAML",
"uri":"iam_08_0021.html",
"doc_type":"usermanual",
"p_code":"55",
"code":"56"
},
{
"desc":"To establish a trust relationship between an enterprise IdP and the cloud platform, upload the metadata file of the cloud platform to the enterprise IdP, and then create ",
"product_code":"iam",
"title":"Step 1: Create an IdP Entity",
"uri":"iam_08_0003.html",
"doc_type":"usermanual",
"p_code":"55",
"code":"57"
},
{
"desc":"You can configure parameters in the enterprise IdP to determine what information will be sent to the cloud platform. The cloud platform authenticates the federated identi",
"product_code":"iam",
"title":"Step 2: Configure the Enterprise IdP",
"uri":"iam_08_0252.html",
"doc_type":"usermanual",
"p_code":"55",
"code":"58"
},
{
"desc":"After an enterprise IdP user logs in to the cloud platform, the cloud platform authenticates the identity and assigns permissions to the user based on the identity conver",
"product_code":"iam",
"title":"Step 3: Configure Identity Conversion Rules",
"uri":"iam_08_0004.html",
"doc_type":"usermanual",
"p_code":"55",
"code":"59"
},
{
"desc":"Federated users can initiate a login from the IdP or SP.Initiating a login from an IdP, for example, Microsoft Active Directory Federation Services (AD FS) or Shibboleth.",
"product_code":"iam",
"title":"Step 4: Verify the Federated Login",
"uri":"iam_08_0025.html",
"doc_type":"usermanual",
"p_code":"55",
"code":"60"
},
{
"desc":"Configure a federated login entry in the enterprise IdP so that enterprise users can use the login link to access the cloud platform.An IdP entity has been created on the",
"product_code":"iam",
"title":"(Optional) Step 5: Configure a Federated Login Entry in the Enterprise IdP",
"uri":"iam_08_0005.html",
"doc_type":"usermanual",
"p_code":"55",
"code":"61"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"IAM User SSO via SAML",
"uri":"iam_08_0253.html",
"doc_type":"usermanual",
"p_code":"52",
"code":"62"
},
{
"desc":"The cloud platform supports identity federation with Security Assertion Markup Language (SAML), which is an open standard that many identity providers (IdPs) use. During ",
"product_code":"iam",
"title":"Overview of IAM User SSO via SAML",
"uri":"iam_08_0254.html",
"doc_type":"usermanual",
"p_code":"62",
"code":"63"
},
{
"desc":"To establish a trust relationship between an enterprise IdP and the cloud platform, upload the metadata file of the cloud platform to the enterprise IdP, and then create ",
"product_code":"iam",
"title":"Step 1: Create an IdP Entity",
"uri":"iam_08_0255.html",
"doc_type":"usermanual",
"p_code":"62",
"code":"64"
},
{
"desc":"You can configure parameters in the enterprise IdP to determine what information will be sent to the cloud platform. The cloud platform authenticates the federated identi",
"product_code":"iam",
"title":"Step 2: Configure the Enterprise IdP",
"uri":"iam_08_0256.html",
"doc_type":"usermanual",
"p_code":"62",
"code":"65"
},
{
"desc":"For the IAM user SSO type, you must configure an external identity ID for the IAM user which the federated user maps to on the cloud platform. The external identity ID mu",
"product_code":"iam",
"title":"Step 3: Configure an External Identity ID",
"uri":"iam_08_0257.html",
"doc_type":"usermanual",
"p_code":"62",
"code":"66"
},
{
"desc":"Federated users can initiate a login from the IdP or SP.Initiating a login from an IdP, for example, Microsoft Active Directory Federation Services (AD FS) or Shibboleth.",
"product_code":"iam",
"title":"Step 4: Verify the Federated Login",
"uri":"iam_08_0258.html",
"doc_type":"usermanual",
"p_code":"62",
"code":"67"
},
{
"desc":"Configure a federated login entry in the enterprise IdP so that enterprise users can use the login link to access the cloud platform.An IdP entity has been created on the",
"product_code":"iam",
"title":"(Optional) Step 5: Configure a Federated Login Entry in the Enterprise IdP",
"uri":"iam_08_0259.html",
"doc_type":"usermanual",
"p_code":"62",
"code":"68"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Virtual User SSO via OpenID Connect",
"uri":"iam_08_0022.html",
"doc_type":"usermanual",
"p_code":"52",
"code":"69"
},
{
"desc":"This section describes how to configure identity federation and how identity federation works.The following describes how to configure your enterprise IdP and the cloud p",
"product_code":"iam",
"title":"Overview of Virtual User SSO via OpenID Connect",
"uri":"iam_08_0010.html",
"doc_type":"usermanual",
"p_code":"69",
"code":"70"
},
{
"desc":"To establish a trust relationship between an enterprise IdP and the cloud platform, set the user redirect URLs and create OAuth 2.0 credentials in the enterprise IdP. On ",
"product_code":"iam",
"title":"Step 1: Create an IdP Entity",
"uri":"iam_08_0009.html",
"doc_type":"usermanual",
"p_code":"69",
"code":"71"
},
{
"desc":"Federated users are named FederationUser by default in the cloud platform. These users can only log in to the cloud platform and they do not have any other permissions. Y",
"product_code":"iam",
"title":"Step 2: Configure Identity Conversion Rules",
"uri":"iam_08_0008.html",
"doc_type":"usermanual",
"p_code":"69",
"code":"72"
},
{
"desc":"Configure a federated login entry in the enterprise IdP so that enterprise users can use the login link to access the cloud platform.An IdP entity has been created on the",
"product_code":"iam",
"title":"(Optional) Step 3: Configure Login Link in the Enterprise Management System",
"uri":"iam_08_0007.html",
"doc_type":"usermanual",
"p_code":"69",
"code":"73"
},
{
"desc":"An identity conversion rule is a JSON object which can be modified. The following is an example JSON object:[ \n { \n \"remote\": [ \n { \n ",
"product_code":"iam",
"title":"Syntax of Identity Conversion Rules",
"uri":"en-us_topic_0079620340.html",
"doc_type":"usermanual",
"p_code":"52",
"code":"74"
},
{
"desc":"MFA authentication provides an additional layer of protection on top of the username and password. If you enable MFA authentication, users need to enter the username and ",
"product_code":"iam",
"title":"MFA Authentication and Virtual MFA Device",
"uri":"iam_10_0002.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"75"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Auditing",
"uri":"iam_01_0011.html",
"doc_type":"usermanual",
"p_code":"13",
"code":"76"
},
{
"desc":"Table 1 lists Identity and Access Management (IAM) operations that can be recorded by Cloud Trace Service (CTS).",
"product_code":"iam",
"title":"IAM Operations That Can Be Recorded by CTS",
"uri":"iam_01_0012.html",
"doc_type":"usermanual",
"p_code":"76",
"code":"77"
},
{
"desc":"After you enable CTS, it records key operations performed on IAM. You can view the operation records of the last 7 days on the CTS console.The following filters are avail",
"product_code":"iam",
"title":"Viewing Audit Logs",
"uri":"iam_01_0013.html",
"doc_type":"usermanual",
"p_code":"76",
"code":"78"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"FAQs",
"uri":"iam_01_0000.html",
"doc_type":"usermanual",
"p_code":"",
"code":"79"
},
{
"desc":"For account security purposes, you are advised to enable login authentication. After this function is enabled, users need to enter an SMS, MFA, or email verification code",
"product_code":"iam",
"title":"How Do I Enable Login Authentication?",
"uri":"iam_01_0002.html",
"doc_type":"usermanual",
"p_code":"79",
"code":"80"
},
{
"desc":"MFA authentication provides an additional layer of protection on top of the username and password. If MFAbased login authentication is enabled, you will need to enter a ",
"product_code":"iam",
"title":"How Do I Bind a Virtual MFA Device?",
"uri":"iam_01_0003.html",
"doc_type":"usermanual",
"p_code":"79",
"code":"81"
},
{
"desc":"After MFAbased login authentication is enabled, you need to enter an MFA verification code in addition to the username and password when logging in to the console. Open ",
"product_code":"iam",
"title":"How Do I Obtain MFA Verification Codes?",
"uri":"iam_01_0001.html",
"doc_type":"usermanual",
"p_code":"79",
"code":"82"
},
{
"desc":"You can unbind the virtual MFA device as long as the mobile phone used to bind the MFA device is available and the MFA application is still installed on the phone.On the ",
"product_code":"iam",
"title":"How Do I Unbind a Virtual MFA Device?",
"uri":"iam_01_0004.html",
"doc_type":"usermanual",
"p_code":"79",
"code":"83"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"iam",
"title":"Change History",
"uri":"en-us_topic_0046611300.html",
"doc_type":"usermanual",
"p_code":"",
"code":"84"
}
]