What Is IAM

Concept of IAM

IAM (Identity and Access Management) is provided by CDNetworks to control user access permissions. Customers can easily manage user identities and securely control user privileges using IAM.

CDNetworks automatically allocates a main account to each customer. The main account has full access permissions to all services and resources purchased by the customer.

If different services and resources need to be managed by different personnel, it is recommended to use IAM to create IAM users (i.e., sub-accounts) under the main account, and assign different permissions to services and resources for each IAM user.

Features of IAM

• The main account serves as the fundamental entity for platform resource ownership, resource usage measurement, and billing, holding full control over all resources and access to all products and services.

• IAM users and their keys can be centrally managed. You can create and manage users under the main account and generate and manage access keys for them.

• The access permissions of IAM users can be centrally controlled. You can attach one or more permission policies to each user to restrict their access to resources.

• The ways in which IAM users access resources can be centrally controlled, ensuring that IAM users access designated platform resources through a secure channel within specified timeframes and network environments.

• Centralized resource management enables unified administration of instances or data created by users, ensuring that these instances or data remain under your full control even after users leave the organization.

Assigning Department Management Permissions Using IAM

If you have purchased both the DWA and Object Storage products from CDNetworks and wish to assign management permissions for different products to separate departments, you can achieve this through IAM.

1. Log in to the customer portal with the main account and navigate to IAM.
2. Create an IAM user by entering the username, email address, password, and user details such as Access Key Management.
3. Grant permissions to the IAM user.