Grant permissions

Authorization is the operation of granting permissions necessary for specific work to the corresponding identity (IAM user, IAM group, or IAM role). After obtaining the permissions, the identity can access the corresponding cloud service and perform required operations.

Procedure

1. Log in to the IAM console.
2. In the left navigation pane, choose Permissions > Grants. The Grants page appears.
3. Click Grant Permission.
4. In the Add Permissions panel, select one or more identities from the Principal drop-down list.

   The identities can be IAM users, groups, or roles. You can select up to five identities at a time.

5. Select one or more policies in the Select Policy section.

   You can select system policies and custom policies.

6. Click OK.