Management and Decentralization of Enterprise IAM Users

Account A of an enterprise has bought multiple cloud resources (such as: Baidu AI Cloud Compute?(BCC), Baidu Object Storage (BOS), Content Delivery Network CDN, etc.). The enterprise has many employees, including developers, testing personnel, Operations personnel, etc., as each employee has different job responsibilities, the permission required is also different; also, the employees do not need to pay for the operation costs separately.

Scenario description:

• Account A of an enterprise may grant different permissions to the different working staff to use the products, such as read-only, operations as well as management; meanwhile, it can refine the control permission to resource level, such as operation permission of a certain instance of BCC.
• The enterprise employees use the IAM user account for login and use, and do not need to pay for the operation costs separately.

Resource Management and Authorized Reference among Different Enterprises

• Organization
• Organization vs Identity and Access Management