Projects are used to isolate resources (including compute, storage, and network resources) among physical regions. A project is provided for each region by default, and permissions are assigned based on projects. Preset projects cannot be deleted.
For more refined access control, create subprojects under a project and create resources in the subprojects. Then, provide users with permissions to access resources in specific subprojects.
IAM projects are different from enterprise projects. For details about their differences, see Identity and Access Management > FAQs > Project Management > What Are the Differences Between IAM Projects and Enterprise Projects?
Figure 1 Project isolation
- Resources cannot be transferred across IAM projects.
- You cannot create projects in IAM after enabling the Enterprise Project function.
Creating a Project
- In the left navigation pane on the IAM console, choose Projects and click Create Project.
Figure 2 Creating a project
- Select a region in which you want to create a subproject.
- Enter a project name.Note
- The project name will be in the format "Name of the default project for the selected region_Custom project name". The name of default projects cannot be modified.
- The project name can only contain letters, digits, hyphens (-), and underscores (_). The total length of the project name cannot exceed 64 characters.
- (Optional) Enter a description for the project.
- Click OK.
Granting a User Group Permissions for a Project
You can assign permissions based on projects to control access to resources in specific projects.
- In the user group list, click Authorize in the row containing the target user group.
Figure 3 Managing permissions
- On the Authorize User Group page, select the policies or roles to be attached to the user group and click Next.
- Specify the authorization scope. If you select Region-specific projects, select one or more projects.
- Click OK.Note
For more information about user group authorization, see Creating a User Group and Assigning Permissions.
Switching Regions or Projects
For project-level services, switch to a region or project in which you have been authorized to access cloud services. You do not need to switch regions or projects for global services.
- Log in to the management console.
- Go to a project-level cloud service page. Click the drop-down list box in the upper left corner of the page and select a region.
Figure 4 Switching to a specific region or project
