doc-exports/docs/dataartsstudio/umn/dataartsstudio_01_0004.html

<a name="dataartsstudio_01_0004"></a><a name="dataartsstudio_01_0004"></a>

<h1 class="topictitle1">Creating an IAM User and Assigning <span id="text13250174381611">DataArts Studio</span> Permissions</h1>
<div id="body8662426"><div class="p" id="dataartsstudio_01_0004__en-us_topic_0223009156_p988518487488">Identity and Access Management (IAM) can be used for fine-grained permissions management on your <span id="dataartsstudio_01_0004__text189401823191311">DataArts Studio</span> resources. With IAM, you can:<ul id="dataartsstudio_01_0004__ul20307133063417"><li id="dataartsstudio_01_0004__en-us_topic_0223009156_li588684820486">Create IAM users for employees based on your enterprise's organizational structure. Each IAM user will have their own security credentials for accessing <span id="dataartsstudio_01_0004__text2090111011530">DataArts Studio</span> resources.</li><li id="dataartsstudio_01_0004__en-us_topic_0223009156_li38863484487">Assign users only the permissions required to perform a task.</li><li id="dataartsstudio_01_0004__en-us_topic_0223009156_li17886174824816">Entrust a <span id="dataartsstudio_01_0004__text458111419359">a cloud platform account</span> or cloud service to perform efficient O&amp;M on your <span id="dataartsstudio_01_0004__text66291413531">DataArts Studio</span> resources.</li></ul>
</div>
<p id="dataartsstudio_01_0004__en-us_topic_0223009156_p7886148114812">If you do not require individual IAM users for permissions management, skip this section.</p>
<div class="section" id="dataartsstudio_01_0004__en-us_topic_0223009156_section149106163317"><h4 class="sectiontitle">Background</h4><ul id="dataartsstudio_01_0004__en-us_topic_0223009156_ul4345266339"><li id="dataartsstudio_01_0004__en-us_topic_0223009156_li19891163562811">Before assigning permissions to a user group, familiarize yourself with the <span id="dataartsstudio_01_0004__text99095165312">DataArts Studio</span> workspace role permissions that can be added to the user group and select permissions based on actual requirements. </li></ul>
</div>
<div class="section" id="dataartsstudio_01_0004__en-us_topic_0223009156_section9135134520119"><h4 class="sectiontitle">Procedure</h4><ol id="dataartsstudio_01_0004__en-us_topic_0223009156_ol11830932152014"><li id="dataartsstudio_01_0004__en-us_topic_0223009156_li1983016328204"><a name="dataartsstudio_01_0004__en-us_topic_0223009156_li1983016328204"></a><a name="en-us_topic_0223009156_li1983016328204"></a>Create a user group and assign permissions to it. Log in to the IAM console using a <span id="dataartsstudio_01_0004__text16645549163611">a cloud platform account</span>, create a user group, and grant permissions of a common user (for example, <span class="parmname" id="dataartsstudio_01_0004__parmname126501549203610"><b>DAYU User</b></span>) to the group.<p id="dataartsstudio_01_0004__en-us_topic_0223009156_p108313320205">For details, see "User Groups and Authorization" &gt; "Creating a User Group and Assigning Permissions" in <em id="dataartsstudio_01_0004__i169381550757">Identity and Access Management User Guide</em>.</p>
<div class="note" id="dataartsstudio_01_0004__en-us_topic_0223009156_note52501597263"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="dataartsstudio_01_0004__en-us_topic_0223009156_ul114668532278"><li id="dataartsstudio_01_0004__li1834013912412">When configuring <span id="dataartsstudio_01_0004__text16819177115812">DataArts Studio</span> permissions for a user group, enter <strong id="dataartsstudio_01_0004__b445894134519">DAYU</strong> in the search box to search for the permissions and select the permissions to be granted to the user group, for example, <strong id="dataartsstudio_01_0004__b0458174124513">DAYU User</strong>.</li><li id="dataartsstudio_01_0004__en-us_topic_0223009156_li147098562278">If an IAM user wants to create a workspace, you must assign the IAM user the <span class="parmname" id="dataartsstudio_01_0004__en-us_topic_0223009156_parmname1529101483514"><b>DAYU Administrator</b></span> policy. Users with the <span class="parmname" id="dataartsstudio_01_0004__en-us_topic_0223009156_parmname1549314196359"><b>DAYU Administrator</b></span> policy can perform all operations on <span id="dataartsstudio_01_0004__text1610641412533">DataArts Studio</span>.</li><li id="dataartsstudio_01_0004__li2866162654415"><span id="dataartsstudio_01_0004__text129123284613">DataArts Studio</span> is a project-level service deployed in specific physical regions. If you select <strong id="dataartsstudio_01_0004__b827913464817">All resources</strong> for <strong id="dataartsstudio_01_0004__b350973420578">Scope</strong>, the permission takes effect in all projects of all regions. If you select <strong id="dataartsstudio_01_0004__b1819632815583">Region-specific projects</strong> for <strong id="dataartsstudio_01_0004__b16349103655811">Scope</strong>, the permission takes effect only for a specified project. When accessing <span id="dataartsstudio_01_0004__text5352191557">DataArts Studio</span>, the IAM user must switch to the region where they have been assigned the required permissions.</li></ul>
</div></div>
</li><li id="dataartsstudio_01_0004__en-us_topic_0223009156_li12832632132013">Create a user and add the user to the user group. Create a user on the IAM console and add the user to the group created in <a href="#dataartsstudio_01_0004__en-us_topic_0223009156_li1983016328204">1</a>.<p id="dataartsstudio_01_0004__en-us_topic_0223009156_p1683243212202">For details, see "IAM Users" &gt; "Creating an IAM User" in <em id="dataartsstudio_01_0004__i016714061014">Identity and Access Management User Guide</em>.</p>
</li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dataartsstudio_01_0118_0.html">Authorizing Users to Use DataArts Studio</a></div>
</div>
</div>