If the administrator does not assign the IAM user to any user group during creation, the newly created IAM user will have no permissions and cannot perform any operations on cloud services. The administrator can later add the user to a user group via the IAM console or the eSurfing Cloud official website, granting them the permission policies associated with that user group. Once authorized, the user will be able to access and use cloud service resources within the account according to the assigned group permissions.
Authorizing Based on the User Group
Step 1: The administrator logs in to the eSurfing Cloud official website using a registered account.
Step 2: Click the account name in the upper-right corner, then select Personal Center from the dropdown menu.
Step 3: In the left navigation pane of the Personal Center, click IAM.
Step 4: In the left navigation pane of IAM, click User Group.
Step 5: Locate the target user group and click Manage User Group on the right.
Step 6: Select the IAM sub-user and click Confirm to add the user to the group. Once added, the IAM user will inherit all permissions assigned to the user group.
Explanation:
l If an IAM user is added to the default admin user group, the user becomes an administrator with full privileges to perform any operation on all cloud services.
l When a user is added to multiple user groups, they will possess the combined permissions of all assigned groups (i.e., the union of all group permissions).
l For system policies of all IAM-authorized cloud services, refer to Permission Sets.
l If Enterprise Management is enabled, IAM projects cannot be created. Please proceed with caution.
Authorizing Based on the Enterprise Project
Step 1: The administrator logs in to the IAM console.
Step 2: In the user list, the administrator clicks the username to enter the IAM User Details page.
Step 3: On the IAM User Details page, click the Authorization Record tab, and then click Accredit to directly grant permissions to the user (applicable for enterprise project authorization). This allows for directly assigning cloud service permissions to the IAM user. After selecting the corresponding cloud service permissions, click Next.
Description:
l If you have enabled Enterprise Management, you will not be able to create IAM projects. Please proceed with caution.
Step 4: On the Set the minimum authorization range page, select the enterprise project for which the IAM user is authorized.
Step 5: Click Confirm to complete the IAM user authorization.
After authorization is completed, the administrator can view or modify the IAM user's permissions on the IAM > Authorization Management page.