Docs

ArkClaw Enterprise

Identity and Access Management

IAM overview

Identity and Access Management (IAM) is a free service provided by the platform for users. It is a permission management system used to control access to cloud resources for different identities. This service offers access management for resources and helps you improve management efficiency and reduce information leakage.

Why use IAM

To use cloud resources, you need to first register an account. After registration, you obtain an account that is referred to as "Root user". By default, the root user has full administrative permissions over all resources under it.

Using only the root user to manage resources may cause the following issues:

Multiple users use the same root user, making it impossible to identify the actual user.

The root user has extensive permissions, so any leak would lead to severe consequences.

Using the root user directly for O&M tasks involves higher risks.

You can avoid the above issues by using IAM features. You can create IAM users, user groups, and roles under the root user. New IAM users, user groups, and roles have no permissions initially. You can grant them appropriate permissions based on actual needs to achieve multi-identity management and granular permission control. For more features, refer to Product introduction.

IAM-related information

Topic	Detailed description	Related documents
IAM-related concepts	Using IAM for permission management involves many technical terms, such as IAM identities (user, user group, and role), policies, and single sign-on (SSO).	Concepts
IAM limits	IAM resources are limited by resource quotas. If the quota limit is exceeded, new resources cannot be created.	Limits
IAM usage process	IAM user: You can authorize IAM users directly or authorize them by adding them to a user group.	Granting permissions to IAM users to use cloud resources required by ArkClaw
IAM policy overview	A policy is a set of permissions described using a syntax structure. Policy types: IAM supports two types of policies: system default policy and custom policy. Policy syntax structure: IAM policies follow a fixed syntax format, allowing you to create various and custom IAM policies as needed. Policy scope: IAM policies apply to two scopes: global permissions and project-level permissions.	IAM policy syntax

Last updated: 2026.04.28 19:37:32