Docs

Server Migration Center

Identity and Access Management

SMC IAM policy types

This topic describes the types of Identity and Access Management (IAM) policies and those related to Server Migration Center (SMC) for you to learn IAM policies quickly. Two IAM policy types are supported: the system default policy and the custom policy. You can use system default policies to grant IAM identities directly. If the system default policies can not meet your needs, you can use custom policies to grant permissions precisely and manage resources flexibly.

System default policies

SMC system default policies

The IAM platform provides default SMC-related policies in advance, with details in the following table.

tip

You can directly assign these system default policies to IAM entities (IAM users, user groups, or roles). System default policies are for authorization only and can not be edited or modified.

System default policy name	Description
SMCFullAccess	After this policy is assigned, the IAM identity (user, user group, or role) obtains full management permissions for Server Migration Center (SMC), including importing migration sources and creating migration tasks.
SMCBatchMigrationAccess	After this policy is assigned, the IAM identity (user, user group, or role) obtains the batch migration permissions in Server Migration Center (SMC) and can use the feature of one-click import of migration source in the console.
SMCReadOnlyAccess	After this policy is assigned, the IAM identity (user, user group, or role) obtains read-only access to Server Migration Center (SMC). This access is restricted to viewing information only, such as migration sources and migration tasks.

Roles or policies required by SMC console features

Console feature	Required cloud service	Required role/policy
Import migration sources/Create migration tasks	ECS	Permissions associated with SMCFullAccess, ECSFullAccess, VPCFullAccess, and EIPFullAccess need to be granted to IAM users.
			Image
			Virtual Private Cloud
			EIP
			Volume
			Snapshot
			Security group
View migration sources/migration tasks	-	Permissions associated with SMCFullAccess or SMCReadOnlyAccess need to be granted to IAM users.

Details of the SMC-related system default policies

tip

For other system default policies, navigate to Policy Management console for more information.

SMCFullAccess policy details

{​
    "Statement": [​
        {​
            "Effect": "Allow",​
            "Action": [​
                "smc:*"​
            ],​
            "Resource": [​
                "*"​
            ]​
        }​
    ]​
}​

SMCReadOnlyAccess policy details

{​
    "Statement": [​
        {​
            "Effect": "Allow",​
            "Action": [​
                "smc:*"​
            ],​
            "Resource": [​
                "*"​
            ]​
        }​
    ]​
}​

Custom policies

Type	Description	Related document
Custom policy type	Custom policies are divided into identity-based policies and resource-based policies, depending on the entity to which they are associated.	Identity-based policies Resource-based policies
Custom policy syntax	Custom policy syntax defines policy permissions through policy elements. When creating an identity-based policy and a resource-based policy, the policy elements differ.	General custom policy syntax examples
Create a custom policy	When authorizing as the root user or an IAM user with IAM management permissions, if the system default policies do not meet your requirements, you can configure fine-grained permissions through a custom policy.	Create a custom policy