You can plan user groups based on user responsibilities. Use the Security Administrator to access IAM and create user groups, then assign corresponding permissions to the user groups according to their responsibilities.

Prerequisite

Please ensure you already have an eSurfing Cloud account. If you do not have one yet, please register first.

Business Scenario

Company A is a website development company with three functional teams. To facilitate centralized resource creation, allocation, and user management, Company A does not require each employee to register an individual account. Instead, the company's administrator registers a single account, creates IAM users under this account, assigns appropriate permissions, and then distributes the IAM users to employees for use.

This section uses Company A's scenario of creating IAM users and user groups as an example to help you quickly understand how enterprises can configure service permissions using IAM.

Staff Composition of Company A

l The management team (corresponding to "Admin" in the diagram below) is responsible for overseeing personnel and resources within the company, including permission assignment and resource allocation. Team members include James and Alice.

l The development team (corresponding to the "Development Team" in the diagram below) is responsible for building the company's website. Team members include Charlie and Jackson.

l The testing team (corresponding to the "Test Team" in the diagram below) is responsible for testing the websites developed by the development team. The team members include Jackson and Emily. Among them, Jackson is involved in both development and testing, so he needs to join both the Development Team and the Test Team to obtain the respective permissions of the two user groups.

Figure: User Management Model

005

Business Composition of Company A

l The Admin Team is primarily responsible for managing company personnel permissions and needs to use the IAM service.

l The Development Team requires ECS, VPC, and EVS during the website development process.

l The Test Team is mainly responsible for website monitoring and testing, and needs to use the Cloud Eye Service (CES).

User Management Process

1. The administrator of Company A logs into eSurfing Cloud using a registered account, creates the Development Team and Test Team, and assigns permissions to these user groups. For detailed steps, see Step 1: Creating User Groups and Assigning Permissions.

2. The administrator of Company A then creates IAM users for members of the three functional teams and instructs them to log in to eSurfing Cloud using the newly created IAM accounts. For detailed steps, see Step 2: Creating an IAM User and Logging In.

Identity and Access Management (Class II Node)