Introduction
Updated at：2025-10-27
Overview
Identity and Access Management primarily helps users manage access permissions to resources within their cloud accounts. It is particularly beneficial for enterprises, enabling different roles to be assigned varied product permissions. For multi-user collaboration on resource operations in an enterprise, it is recommended to use Identity and Access Management.
Users can manage users, groups, and permissions through the provided REST APIs.
The current service domain for Identity and Access Management API is iam.bj.baidubce.com, which can be accessed via both HTTP and HTTPS.
API overview
This section outlines the APIs available for Identity and Access Management (IAM). Click the links for detailed API information.
| API | Description |
|---|---|
| [User management API](IAM/API Reference_IAM/User management API.md) | Create, query, update, delete, and list IAM users, and manage IAM user login configurations and AccessKeys. |
| [Group management API](IAM/API Reference_IAM/Group management API.md) | Create, query, update, delete, and list groups, and manage group members. |
| [Policy management API](IAM/API Reference_IAM/Policy management API.md) | Create, query, update, delete, and list permission policies, and assign or revoke permissions for users and groups. |