Docs

Server Migration Center

Identity and Access Management

Granting permissions to IAM users to use cloud resources required by SMC

The root user has full access permissions to all cloud resources under the account. However, in complex cloud scenarios, sharing root user credentials is inconvenient and risky to account security. Therefore, when resources are shared among multiple users, you can use the IAM feature to create IAM users or user groups and grant them specific permissions for cloud resource access as the root user. This enables multi-identity management and fine-grained permission control.

This topic describes how to create IAM users or user groups as the root user and grant the minimum permissions required for accessing cloud resources associated with SMC to IAM users or user groups based on needs. This helps achieve delegated management, improve management efficiency, and maintain account security.

Procedure

You can create users and directly grant permissions to them, or grant user group-associated permissions to them by adding them to a user group.

Grant permissions to IAM user directly

Grant permissions to IAM user by adding IAM user to user group

Log in to the IAM console as the root user or an authorized account. Then, create an IAM user. For details, see Creating IAM users.

Assign permission policies related to cloud products required by SMC to the target IAM user. For details, see Granting permissions to IAM users.

tip

To assign required permission policies, refer to Roles or policies required by SMC console features.

Method 1:

On the user list page of the IAM console, copy the IAM user login link for the current account and open it to log in directly.

Method 2:

Access the platform login page. Then, click "IAM user" at the lower right of the "Log in now" button to navigate to the user login page. First, enter the account name or ID of the root user, and then enter the IAM username and password for login.

Last updated: 2026.01.26 14:59:49