Concept | Description |
Space | When enabling Identity Management, you need to create a Space. All Identity Management resources are maintained within the Space. Each Group Account can create only one Space. The Space name will be used in the user log in to URL. |
User | A User is a type of identity in the Identity Management, it refers to new users you create in the Identity Management after enabling the Group Account service. Before performing CAM synchronous operations, users in the Identity Management do not have any features, identity, log in to, access permissions, etc. You can create and manage all users accessing Tencent Cloud here. Users can be granted permissions to access Tencent Cloud accounts. |
User Group | A User Group is a type of identity in the Identity Management. You can add users to a user group and then authorize permissions based on the user group for unified permission management. |
SCIM Synchronization | The Identity Management supports user and user group synchronization based on the SCIM protocol. By using SCIM synchronization, you only need to manage identities in your enterprise identity management system without manually managing users, user groups, and their memberships in the Identity Management, enhancing management efficiency and security. |
Configuring permission | Permission Configuration is the configuration template used by users to access Tencent Cloud accounts and includes a set of permissions. You can use this template to authorize users for specific accounts. |
Accounts | Accounts include admin accounts and member accounts. Admin Account: The admin account is the Super Administrator of the enterprise organization, and only the admin account can manage the Identity Management. Member Account: Member accounts cannot manage the Identity Management, nor can they view it. |
Multi-Account Authorization | Based on the organizational structure of the Group Account, you can set the users or user groups allowed to access each account, as well as their access privileges. You can authorize Enterprise Management Accounts or any Member Account. |
Permission Configuration Deployment | When authorizing users for an account, the specified permission configuration will be deployed to the relevant account, becoming CAM Role, CAM Policies, and Role SSO identity providers for that account. If the permission configuration has already been deployed to an account but changes are made to the permission configuration, these changes will not automatically update on the respective account. You will need to manually redeploy for the changes to take effect. |
Login Portal | The Login Portal is an independent gateway for Identity Management users to log in and use Tencent Cloud resources. After Identity Management users log in, they can view the accounts they have access to and can only access the Tencent Cloud Console within the granted permissions. You can view the Login Portal address (URL) on the Overview Page of the Identity Management. |
Identity Management Administrator | An Identity Management Administrator refers to the management account that has opened the Identity Management and the CAM users under it with the FullAccess (QcloudOrganizationFullAccess) permissions. |
Single Sign-On (SSO) | Identity Management supports Single Sign-On (SSO) based on SAML 2.0. Tencent Cloud is the service provider (SP), while the enterprise's own identity management system is the identity provider (IdP). Through Single Sign-On, enterprise employees can use their IdP user identity to directly log in to the Identity Management. |
Esta página foi útil?
Você também pode entrar em contato com a Equipe de vendas ou Enviar um tíquete em caso de ajuda.
comentários