Overview

An IAM group is an entity identity of Identity and Access Management (IAM). You can create IAM groups to group and authorize IAM users with the same responsibilities, to better manage the IAM users and their permissions.

• If the responsibilities of an IAM user change, you can move the IAM user to the IAM group with the corresponding responsibilities, without affecting other IAM users.
• If the permissions of an IAM group change, you can modify the policy attached to the group. The modifications to the policy apply to all IAM users in the group.