When I log in as an IAM user and perform operations on cluster resources (for example, nodes) on the cluster configuration page, the system displays the Not authorized yet message. The error message is AccessDenied,Code:403.

Case 2

When I use an IAM user to deploy the ebs add-on, the system displays the need bind ecs with assume role name error.

Cause analysis

The account you are using has not been granted RBAC authorization for this cluster and therefore does not have permission to manage the relevant cluster resources. A Volcano Engine root user or IAM user, by default, only has administrator permissions for clusters that they create. To perform operations on clusters created by other accounts, you need RBAC authorization.

For RBAC details, see Authorization overview.

Solution

In the left navigation bar, click Authorizations > User authorization.

On the User authorization management page, click Create user authorization.

On the Create user authorization page, select the username to be authorized (the IAM user) and configure RBAC permissions for the IAM user as needed.

Parameters

Description

Parameters	Description
User	In the All users list, select the check boxes in front of the usernames to configure the same RBAC permissions for the selected IAM users.
Permissions	Select the cluster and namespace to be authorized, and specify the role for the users. In this example, select Cluster administrator.

Click Create to complete IAM user authorization.

Last updated: 2026.07.23 14:31:46

Public security network record in Beijing: No. 11010802032137