tencent cloud

All product documents
Elastic MapReduce
Managing Permissions
Last updated: 2024-11-28 16:22:15
Managing Permissions
Last updated: 2024-11-28 16:22:15
This article explains how to authorize a service role and sub-user when using EMR Serverless HBase.

Authorizing a Service Role

When using EMR Serverless HBase for the first time, you need to authorize the EMR service role EMR_QCSRole for the EMR product so that the EMR can call the necessary product features for the required permissions.
1. Log in to the EMR Serverless HBase Console. When using it for the first time, you will be prompted to authorize EMR. Click Authorize to go to the role management authorization page.
2. After confirming the service authorization information, click Authorize to complete the service role authorization.
Note:
When using for the first time, ensure that the sub-user or collaborator account has been granted the QcloudCamSubaccountsAuthorizeRoleFullAccess permission.

Authorizing Sub-User

In actual product use, the main accounts are usually collaborators or sub-users. Depending on the authorization requirements, different granular operational permissions can be granted to sub-users or collaborators through the following methods.
Authorization Plan
Applicable Scenario
Operation Step
Authorization based on preset permissions
Applicable to configuring sub-user management permissions of all instances.
Through the EMR Serverless HBase preset policy, quickly grant sub-users the QcloudEMRFullAccess permission, giving the sub-user management permissions for all EMR resources.
Operation-based authorization
Applicable to configuring partial operational permissions of all instances for specific sub-users.
Create a new CAM custom policy to grant sub-users partial operational permissions for the product. For details, see
General authorization based on tags
Applicable to configuring sub-user management permissions for instances of different ownership through tags.
1.Set instance tag: Add an ownership tag when creating the instance.
2.Set sub-user permissions: Create a new CAM custom policy to grant sub-users partial operational permissions for specific instances. For details, see Create a Custom Policy with Policy Syntax.




































































Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

7x24 Phone Support