Creating a User¶
If you need to share resources in your account to other users, you can create users by using the console or by calling an API, and set security credentials and required permissions for the users. The users can then access the cloud platform through the management console or by calling APIs.
Procedure¶
In the navigation pane, choose Users.
On the Users page, click Create User.
Specify the user information on the Create User page. To create more users, click Add User. You can create a maximum of 10 users at a time.
Parameter
Description
Username
Username that will be used to log in to the cloud platform. This field is required.
Email Address
Email address of the user that can be used as a login credential. Users can bind an email address after they are created. This field is required if you have specified Set by user as the access type.
Mobile Number
Mobile phone number of the user that can be used as a login credential. Users can bind a mobile number after they are created. This field is optional.
Description
Additional information about the user. This field is optional.
External Identity ID
Identity of an enterprise user in IAM user SSO.
This parameter (no more than 128 characters) is mandatory for IAM user SSO. For details, see IAM User SSO via SAML.
Select an access type and click Next.
Access Type
Configuration
Description
Programmatic access
--
--
If you select this option, after the user is created, you can download the access key (AK/SK) generated for the user. The user can use the access key to access the cloud platform through APIs. Each user can have a maximum of two access keys.
Management console access
Console Password
Set by user
If you are the administrator setting the password for the user, select this option. The user can set a password by clicking on the one-time login URL sent over email.
The URL is valid for 7 days. Remind the user to log in and set a password before the URL expires.
Automatically generated
The system will generate a random password after you click OK. This option is available only when you create a single user.
Set now
Select this option if you are the user. Then, set a password for login.
Note
The password must meet the following requirements:
Must contain 6 to 32 characters.
Must contain at least two types of the following: uppercase letters, lowercase letters, digits, and special characters (
~!?,.:;-_'"(`){}[]/<>@#$%^&*+|\= and spaces).Cannot be the username or the username spelled backwards. For example, if the username is A12345, the password cannot be A12345, a12345, 54321A, or 54321a.
Cannot contain the user's mobile number or email address.
Login Protection
Enable
If login protection is enabled, the user will need to enter a verification code in addition to the username and password during login. Enable this function for account security.
You can choose from SMS-, email-, and virtual MFA-based login verification.
Disable
For this example, disable login protection.
Note
For security purposes, select only one access type for each user.
Programmatic access: Users can access cloud services using development tools (including APIs, CLI, and SDKs) that support key authentication. This access type is recommended for developers.
Management console access: Users can log in to the management console using their own usernames and passwords.
Users can log in to the cloud platform using the username, mobile number, or email address.
If users forget their password, they can reset it through email address or mobile number verification. If no email address or mobile number has been bound to users, users need to contact the administrator to reset their password.
After you set the access type for IAM users, you cannot change it later. However, you can control their access by enabling or disabling their accounts.
(Optional) Click Next and add the user to one or more user groups.
The user will inherit the permissions assigned to the user groups to which the user belongs.
You can also create new groups as required.
Note
If a user will be an administrator, add the user to the default group admin.
You can enter a keyword to quickly find the target user group.
You can add a user to multiple user groups.
Click Create.
Note
If you have specified the access type as Programmatic access, download the access key on the Finish page.