Manage projects

Last updated:2020-07-19 00:07:27

Project

Projects meet requirements such as resource isolation and billing based on organizational relationships in an enterprise, for example, by company, department, or project.
Projects can be used to:

  1. Isolate resources. An IAM user obtains permissions to manage resources based on the project to which the IAM user is added. The specific permissions are subject to IAM policies.
  2. Quickly allocate new resources to IAM users. After new resources are added to a project, the IAM users that belong to the project are automatically granted the permissions to manage the resources.
  3. Query resource consumption based on projects.

Create a project

A Kingsoft Cloud account or an authorized IAM user can create a project for the Kingsoft Cloud account. The procedure is as follows:

  1. Log in to the Kingsoft Cloud console (new version) with your Kingsoft Cloud account or as an authorized IAM user.
  2. Choose Products and Services > Monitor and Management > IAM. In the left navigation pane, click Project. The Project page appears.
  3. On the Project page, click + Project. The New Project pane appears, as shown in the following figure.

image.png

Default project

The system automatically creates a default project named Default Project. Log in to the Kingsoft Cloud console (new version). Choose Products and Services > Monitor and Management > IAM. In the left navigation pane, click Project. The first project in the list is the default project.

image.png

All purchased resources that support the project feature are put to the default project. The default project is a common project. You can transfer the resources in the default project to other projects, and add IAM users to or remove IAM users from the default project. All IAM users are added to the default project.

Migrate resources between projects

You can migrate resources in a project to another project provided that you are granted the permission to do so.
The migration must be performed in the console of a specific service.

Add IAM users to a project

To allow IAM users to manage resources in a project, you must add the IAM users to the project.
The procedure is as follows:

  1. Log in to the Kingsoft Cloud console (new version) with your Kingsoft Cloud account or as an authorized IAM user.
  2. Choose Products and Services > Monitor and Management > IAM. In the left navigation pane, click Project. The Project page appears.
  3. On the Project page, click the name of a project to go to the Details page. Click the Added member tab and then click Add member to add IAM users to the project.

You can also click Add member in the Actions column of a project to add IAM users.

Create and delete members

The procedure is the same as that for creating or deleting IAM users on the Identities > Subusers page in the Kingsoft Cloud console, and therefore is not described here.

Note:

  1. All existing IAM users are in the default project. New IAM users will be automatically added to the default project.

  2. If new IAM users are deleted, they will be removed from the default project as well.

  3. If IAM users are deleted, they will be removed from all projects, including the default project, to which they have been added as well.

Disable and enable a project

Except the default project, you can disable all projects that you have created. You cannot use a disabled project, for example, you cannot migrate resources to a disabled project. However, you can enable a disabled project again.

  1. Log in to the Kingsoft Cloud console (new version). Choose Products and Services > Monitor and Management > IAM. In the left navigation pane, click Project. The Project page appears.

  2. On the Project page, find the target project and click Disable in the Actions column to disable the project. The project cannot be used but you can view the project by clicking Details. Except the default project, other projects you have created can be disabled.

Before you disable a project, make sure that all resources and IAM users in the project have been removed.

image.png

You can enable a disabled project on the Project page by clicking Enabled.

Use projects as an IAM user

After an IAM user logs in to the Kingsoft Cloud console and goes to the Project page, the IAM user can only view projects allocated by the Kingsoft Cloud account, that is, projects to which the IAM user has been added. In addition, the IAM user can only manage resources in the projects with assigned permissions.

If the IAM user is assigned the permission to view all projects or the permissions at the Kingsoft Cloud account level, the IAM user can view all projects of the Kingsoft Cloud account.

Allow an IAM user to view all projects

  1. Log in to the Kingsoft Cloud console (new version). Choose Products and Services > Monitor and Management > IAM. In the left navigation pane, choose Identities > Subusers. The Subusers page appears.
  2. On the Subusers page, click the name of an IAM user to go to the User details page. Click the Safety management tab and then click Edit Rule next to Console Logon Management. On the Edit Rule pane that appears, select Allow viewing for Sub-users view all items, as shown in the following figure.

Then, the IAM user can view all projects in the Kingsoft Cloud console, including projects that will be created in the future. However, this does not mean the IAM user is added to these projects and obtains the permissions in these projects.

image.png

Project and role

An IAM user can access the Kingsoft Cloud console based on a role, and manage resources based on the permissions in a project.

Note:

  1. IAM allows you to assign permissions to a role separately. The permissions of a role in a project is a union of policies attached to the role and permissions on project resources. You can distinguish permissions of a role from permissions of an IAM user in a project by assigning permissions to the role separately.

  2. IAM allows you to add a maximum of 10 users and 10 roles to 10 projects at the same time.

To add roles to a project, find the target project on the Project page, click Add member in the Actions column, and select roles as required.

image.png

Did you find the above information helpful?

Unhelpful
Mostly Unhelpful
A little helpful
Helpful
Very helpful

What might be the problems?

Insufficient
Outdated
Unclear or awkward
Redundant or clumsy
Lack of context for the complex system or functionality

More suggestions

0/200

Please give us your feedback.

Submitted

Thank you for your feedback.

问题反馈