What Can I Do If I Am Not Authorized to View Passwords on the Account Management Page?

Issue Description

When a user wants to view the password on the account management page, the system displays a message indicating that the user does not have the permission to view the password, as shown in the figure below.

Cause Analysis

To view a password, you must have the coc:account:getPassword and kms:dek:decrypt permissions to obtain the encrypted password and decrypt the password. Therefore, ensure that the account used to log in to the console has been granted the required permissions.

Solution

1. Log in to IAM.

   If you do not have the IAM access permission, contact the administrator.

   Figure 1 No permissions to access IAM.
   

2. In the navigation pane, choose Users.
   Figure 2 Viewing users
   

3. In the displayed page, click the target username. The user details page is displayed.
4. Click the Permissions tab to view all permissions of the current user.
   Figure 3 Viewing user authorization records
   

5. Click the permission name to view the details and check whether the coc:account:getPassword and kms:dek:decrypt permissions exist in the Action list.
   Figure 4 Confirming permissions
   

6. If the current account does not have the required permissions, contact the account administrator to request coc:account:getPassword and kms:dek:decrypt permissions for the login user in IAM.

   For details, see Creating a User Group and Assigning Permissions.