tencent cloud

Feedback

Managing Permissions

Last updated: 2024-11-28 16:22:15
    This article explains how to authorize a service role and sub-user when using EMR Serverless HBase.

    Authorizing a Service Role

    When using EMR Serverless HBase for the first time, you need to authorize the EMR service role EMR_QCSRole for the EMR product so that the EMR can call the necessary product features for the required permissions.
    1. Log in to the EMR Serverless HBase Console. When using it for the first time, you will be prompted to authorize EMR. Click Authorize to go to the role management authorization page.
    2. After confirming the service authorization information, click Authorize to complete the service role authorization.
    Note:
    When using for the first time, ensure that the sub-user or collaborator account has been granted the QcloudCamSubaccountsAuthorizeRoleFullAccess permission.

    Authorizing Sub-User

    In actual product use, the main accounts are usually collaborators or sub-users. Depending on the authorization requirements, different granular operational permissions can be granted to sub-users or collaborators through the following methods.
    Authorization Plan
    Applicable Scenario
    Operation Step
    Authorization based on preset permissions
    Applicable to configuring sub-user management permissions of all instances.
    Through the EMR Serverless HBase preset policy, quickly grant sub-users the QcloudEMRFullAccess permission, giving the sub-user management permissions for all EMR resources.
    Operation-based authorization
    Applicable to configuring partial operational permissions of all instances for specific sub-users.
    Create a new CAM custom policy to grant sub-users partial operational permissions for the product. For details, see
    General authorization based on tags
    Applicable to configuring sub-user management permissions for instances of different ownership through tags.
    1.Set instance tag: Add an ownership tag when creating the instance.
    2.Set sub-user permissions: Create a new CAM custom policy to grant sub-users partial operational permissions for specific instances. For details, see Create a Custom Policy with Policy Syntax.
    
    

    

    

    

    
    

    

    
    
    
    
    

    

    

    

    
    

    

    
    
    
    
    

    

    

    

    
    

    

    
    
    
    
    

    

    

    

    
    

    

    
    
    
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support