User management API

Updated at：2025-10-27

Create User

Support creating IAM users. Please refer to the following codes:

                Python
                
            

                def create_user():
    iam_client = IamClient(iam_sample_conf.config)
    
# User creation request as dict
# Set username (1-64 characters, letters, numbers, or "_")
# Set user description
    create_user_request = {"name": "test_user", "description": "create user: test_user"}
    response = iam_client.create_user(create_user_request)
    print(response)
            

Query user

Query an IAM user with reference to the following codes:

                Python
                
                def get_user():
    iam_client = IamClient(iam_sample_conf.config)
    
# Set username
    user_name = b'test_user'
    response = iam_client.get_user(user_name)
    print(response)

Update user

Support updating an IAM user with reference to the following codes:

                Python
                
            

                def update_user():
    iam_client = IamClient(iam_sample_conf.config)
# Current username
    user_name = b"test_user"
    
# User update request as dict
# Set updated username
# Set updated user description
    update_user_request = {"name": "test_user_new", "description": "test-new"}
    response = iam_client.update_user(user_name, update_user_request)
    print(response)
            

Delete user

Support deleting an IAM user with reference to the following codes:

                Python
                
            

                def delete_user():
    iam_client = IamClient(iam_sample_conf.config)
# Current username
    user_name = b"test_user"
    response = iam_client.delete_user(user_name)
    print(response)
            

List users

List users with reference to the following codes:

                Python
                
                def list_user():
    iam_client = IamClient(iam_sample_conf.config)
    response = iam_client.list_user()
    print(response)

Configure console login for the user with reference to the following codes:

                Python
                
            

                def update_user_login_profile():
    iam_client = IamClient(iam_sample_conf.config)
    
# Configure the user's console login request as dict
# Set user password, not displayed in responses
# Whether secondary verification device binding is required enabledLoginMfa
# Secondary verification type loginMfaType, options: PHONE-Mobile phone number, TOTP virtual MFA device
# Bound third-party login type thirdPartyType, options: UUAP-intranet account, PASSPORT-Baidu account
# Bound third-party login account thirdPartyAccount, which can be a phone number, email, or account name when the binding type is PASSPORT
    update_user_login_profile_request = {"password":"Pa$$word4Demo", "enabledLoginMfa": True, "loginMfaType": "PHONE",
                                         "thirdPartyType": "PASSPORT", "thirdPartyAccount": "testPassportAccount"}
    
# Current username
    user_name = b"test_user"
    response = iam_client.update_user_login_profile(user_name, update_user_login_profile_request)
    print(response)
}
            

Note: 1. Unbinding is performed when thirdPartyType and thirdPartyAccount are both empty strings; 2. If enabledLoginMfa":true is set, loginMfaType must be specified

Query console login configuration for the user with reference to the following codes:

                Python
                
            

                def get_user_login_profile():
    iam_client = IamClient(iam_sample_conf.config)
# Current username
    user_name = b"test_user"
    response = iam_client.get_user_login_profile(user_name)
    print(response)
            

Disable user's console login configuration, i.e., disable user's console login, with reference to the following codes:

                Python
                
                def delete_user_login_profile():
    iam_client = IamClient(iam_sample_conf.config)
    
# Set current username
    user_name = b"test_user"
    response = iam_client.delete_user_login_profile(user_name)
    print(response)

Create user's AccessKey

Create a set of AccessKeys for the user with reference to the following codes:

                Python
                
                def create_user_accesskey():
    iam_client = IamClient(iam_sample_conf.config)
    
# Set current username
    user_name = b"test_user"
    response = iam_client.create_user_accesskey(user_name)
    print(response)

Disable user's AccessKey

Disable a specified set of AccessKeys for the user with reference to the following codes:

                Python
                
            

                def disable_user_accesskey():
    iam_client = IamClient(iam_sample_conf.config)
    
# Set current username
    user_name = b"test_user"
    
# Set the AK to be disabled
    accesskey_id = b"test_access_key_id"
    response = iam_client.disable_user_accesskey(user_name, accesskey_id)
    print(response)
            

Enable user's AccessKey

Recover a specified set of AccessKeys for the user to "Enabled" status with reference to the following codes:

                Python
                
            

                def enable_user_accesskey():
    iam_client = IamClient(iam_sample_conf.config)
    
# Set current username
    user_name = b"test_user"
    
# Set the AK to be enabled
    accesskey_id = b"test_access_key_id"
    response = iam_client.enable_user_accesskey(user_name, accesskey_id)
    print(response)
            

Delete user's AccessKey

Delete a specified set of AccessKeys for the user with reference to the following codes:

                Python
                
            

                def delete_user_accesskey():
    iam_client = IamClient(iam_sample_conf.config)
# Set current username
    user_name = b"test_user"
    
# Set the AK to be deleted
    accesskey_id = b"test_access_key_id"
    response = iam_client.delete_user_accesskey(user_name, accesskey_id)
    print(response)
            

List user's AccessKeys

List all AccessKeys for the user with reference to the following codes:

                Python
                
                def list_user_accesskey():
    iam_client = IamClient(iam_sample_conf.config)
    
# Set current username
    user_name = b"test_user"
    response = iam_client.list_user_accesskey(user_name)
    print(response)

Role Management Interfaces

Version Change Records

IAM IAM

IAM IAM

User management API

Create User

Query user

Update user

Delete user

List users

Create user's AccessKey

Disable user's AccessKey

Enable user's AccessKey

Delete user's AccessKey

List user's AccessKeys

IAM IAM

IAM IAM

User management API

Create User

Query user

Update user

Delete user

List users

Configure console login for the user

Query console login configuration

Disable console login configuration

Create user's AccessKey

Disable user's AccessKey

Enable user's AccessKey

Delete user's AccessKey

List user's AccessKeys