Docs

ArkClaw Enterprise

Identity and Access Management

Granting permissions to IAM users to use cloud resources required by ArkClaw

While a root user has full resource access, sharing credentials in complex access scenarios can create inconvenience and security risks. Therefore, when resources are shared among multiple users, you can use the IAM feature to create IAM users or user groups and grant them specific permissions for cloud resource access as the root user. This enables multi-identity management and fine-grained permission control.

This topic describes how to create IAM users or user groups as the root user and grant the minimum permissions required for ArkClaw to access cloud resources to IAM users or user groups based on needs. This helps achieve delegated management, improve management efficiency, and maintain account security.

Procedure

You can create users and directly grant permissions to them, or grant user group-associated permissions to them by adding them to a user group.

Grant permissions to IAM user directly

Grant permissions to IAM user by adding IAM user to user group

Log in to the IAM console as the root user or an authorized account, and create an IAM user. For details, see Creating IAM users.

Assign permission policies related to cloud products required by ArkClaw to the target IAM user. For details, see Granting permissions to IAM users.

tip

To allow your IAM user to only access the ArkClaw console and view information about the created ArkClaw, assign the ArkClawXReadOnlyAccess permission.

To allow your IAM user to create and manage ArkClaw, assign the ArkClawXFullAccess permission.

Method 1:

On the user list page of the IAM console, copy the IAM user login link for the current account and open it to log in directly.

Method 2:

Access the platform login page. Then, click "IAM user" at the lower right of the "Log in now" button to navigate to the user login page. First, enter the account name or ID of the root user, and then enter the IAM username and password for login.

Last updated: 2026.04.01 14:46:29