This document describes how to create an IAM user and grant permissions. You can directly authorize an IAM user, or add an IAM user to a user group and authorize the user group, and the members of the user group will inherit the permissions of the user group:

Authorize directly for IAM users #

1. Create an IAM user

   tip

   If the current policy already meets the usage requirements, you can directly add a permissions policy for the newly created IAM user when creating an IAM user, and specify the scope of the policy.

2. (Optional) Create a custom policy .
3. Add permissions for IAM users
   • Global permissions: The authorization policy takes effect on all items in the account (including future additions).
   • Project permissions: The policy applies only to resources under the project within the specified scope.
4. Log in to Volcano Engine as an IAM user.

Authorize IAM users by joining a user group #

1. Create a user group
2. (Optional) Create a custom policy .
3. Create an IAM user
4. Add permissions to the user group
   When adding permissions, you need to select the scope of permissions:
   • Global permissions: The authorization policy takes effect on all items in the account (including future additions).
   • Project permissions: The policy applies only to resources under the project within the specified scope.
5. IAM user Join user group
6. Log in to Volcano Engine as an IAM user.