Creating a User and Granting DDS Permissions

You can use Identity and Access Management (IAM) for fine-grained permissions control for DDS. With IAM, you can:

Create IAM users for personnel based on your enterprise's organizational structure. Each IAM user has their own identity credentials for accessing DDS resources.
Grant only the permissions required for users to perform a specific task.
Entrust a Huawei Cloud account or a cloud service to perform efficient O&M on your DDS resources.

If your Huawei Cloud account does not require individual IAM users, you can skip this section.

This section describes the procedure for granting user permissions. Figure 1 shows the process flow.

Before granting permissions to user groups, learn about system-defined permissions in System-defined permissions for DDS. To grant permissions for other services, learn about all System-defined Permissions.

Figure 1 Process for granting DDS permissions

On the IAM console, create a user group and grant it permissions.
Create a user group on the IAM console, and assign the DDS FullAccess permissions to the group.

To use some interconnected services, you also need to configure permissions of such services.

For example, when using DAS to connect to a DB instance, you need to configure the DDS FullAccess and DAS FullAccess permissions.
Create an IAM user and add it to the created user group.
Create a user on the IAM console and add it to the user group created in 1.
Log in as the IAM user and verify permissions.
In the authorized region, perform the following operations:

Choose Service List > Document Database Service and click Buy DB Instance. If you can buy a DDS DB instance, the required permission policy is in effect.