preparations - support.huaweicloud.coman account is an entity that accesses huawei cloud. for...

22
DAYU Preparations Issue 01 Date 2020-03-17 HUAWEI TECHNOLOGIES CO., LTD.

Upload: others

Post on 15-Mar-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

DAYU

Preparations

Issue 01

Date 2020-03-17

HUAWEI TECHNOLOGIES CO., LTD.

Page 2: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Copyright © Huawei Technologies Co., Ltd. 2020. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without priorwritten consent of Huawei Technologies Co., Ltd. Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respectiveholders. NoticeThe purchased products, services and features are stipulated by the contract made between Huawei andthe customer. All or part of the products, services and features described in this document may not bewithin the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,information, and recommendations in this document are provided "AS IS" without warranties, guaranteesor representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.Address: Huawei Industrial Base

Bantian, LonggangShenzhen 518129People's Republic of China

Website: https://www.huawei.com

Email: [email protected]

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. i

Page 3: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Contents

1 Initial Preparations..................................................................................................................11.1 Making Preparations.............................................................................................................................................................. 11.2 Registering an Account and Getting Authenticated................................................................................................... 21.3 Obtaining a DAYU Instance................................................................................................................................................. 21.4 (Optional) Buying a DAYU Incremental Package........................................................................................................ 61.5 Creating a Workspace......................................................................................................................................................... 131.6 Authorizing IAM Users to Use DAYU............................................................................................................................. 151.6.1 Creating a User and Granting DAYU Permissions..................................................................................................151.6.2 Adding a Workspace Member and a Role................................................................................................................ 161.7 (Optional) Obtaining the Authentication Information............................................................................................17

DAYUPreparations Contents

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. ii

Page 4: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

1 Initial Preparations

Before using DAYU, you need to have a HUAWEI CLOUD account or an IAM userthat can access DAYU. This document describes how toregister a HUAWEI CLOUDaccount, create an IAM user, and obtain a DAYU instance.

1.1 Making PreparationsBefore using DAYU, register a HUAWEI CLOUD account and buy a DAYU instance.Refer to DAYU preparation process for details.

Figure 1-1 The following figure shows the preparation process with DAYU:

1. Registering an Account and Getting Authenticated2. Buying DAYU

a. Obtaining a DAYU Instanceb. (Optional) Buying a DAYU Incremental Package

3. Creating a Workspace4. Authorizing IAM Users to Use DAYU

a. Creating a User and Granting DAYU Permissionsb. Adding a Workspace Member and a Role

5. (Optional) Obtaining the Authentication Information

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 1

Page 5: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

1.2 Registering an Account and Getting AuthenticatedAn account is an entity that accesses HUAWEI CLOUD. For details, see AccountInfo. This section describes how to register a HUAWEI CLOUD account. If youalready have a HUAWEI CLOUD account, skip this part.

1. Visit HUAWEI CLOUD.2. In the upper right corner of the displayed page, click Register.3. Complete the registration as instructed.

You are advised to complete real-name authentication for better experience inusing cloud services. Real-name authentication is available for two types ofaccounts: individual account and enterprise account. For details about theauthentication methods for different account types, click the following link: (Ifyour account has passed the real-name authentication, skip this part.)

● Individual Real-Name Authentication Process● Enterprise Real-Name Authentication Process

● After you send the application for real-name authentication, it will take three work daysat most before the application is approved.

● The account takes effect 40 minutes later after your real-name authentication isapproved.

1.3 Obtaining a DAYU InstanceDAYU supports Yearly/Monthly package billing. The package versions includeStarter, Basic, Advanced, Professional, and Enterprise. Billing items involved aredata integration, number of scheduling tasks per day, and number of assetssupported by data governance.

● Starter: This version is for primary data lake projects where no full-time datadevelopment personnel and data governance are required.

● Basic: This version is for scenarios where one or two full-time datadevelopment personnel are required and no more than 1,000 original datatables are involved.

● Advanced: This version is for scenarios where five to ten full-time datadevelopment personnel are required, clear data standards and efficient dataquality management are available, and 2,000 data tables are involved.

● Professional: This version is for medium and large enterprises that haveexcellent data management teams, mature, high-quality systems, and 10 to30 full-time data development personnel.

● Enterprise: This version is for large enterprises with multiple branches.

Context● By default, only HUAWEI CLOUD accounts can buy DAYU instances or

incremental packages. By default, a HUAWEI CLOUD account has allpermissions for DAYU.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 2

Page 6: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

● Only users with the DAYU Administrator or Tenant Administrator policy canbuy DAYU instances or incremental packages. If you want to buy theinstances, you need to assign policies to the user.

The Tenant Administrator policy has all cloud service administrator permissionsexcept the IAM management permission. For security purposes, you are not advised togrant this policy to IAM users. Exercise caution when performing this operation.

PrerequisitesYou have applied for a VPC, subnet, and security group.

Buying a DAYU Instance and Accessing the Console1. Log in to the public cloud management console.

2. Click in the upper left corner of the page to select a region.

3. In the upper left corner of the console, click (the Service List icon) andchoose Enterprise Intelligence > DAYU.

4. Click Buy DAYU Instance to navigate to the page where you can buy a DAYUinstance.

5. Configure the instance parameters. Refer to Table 1-1 for details.

Table 1-1 DAYU instance parameters

Parameter Example Description

Region CN North-Beijng1

The region where the DAYU instanceresides. Resources in different regionscannot communicate with each other. Takecare when selecting the region.

AZ AZ2 The availability zone (AZ). Select an AZ byreferring to Region and AZ.

InstanceName

DAYU-test The name of your DAYU instance.

VPC vpc1 The VPC, subnet, and security group wherethe DAYU instance resides, which are usedto communicate with the desired datasource.For more information, see Virtual PrivateCloud User Guide.

Subnet subnet-1

SecurityGroup

sg-1

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 3

Page 7: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Parameter Example Description

EnterpriseProject

default This parameter is available only when anenterprise project has been created on theEnterprise Project Management page.An enterprise project facilitatesmanagement of cloud resources. For moreinformation, see Enterprise ManagementUser Guide.

Renew - Select Auto-renew to automatically renewthe subscription by month or by year.

6. If there is no need to change the default settings, click Buy Now to display

the page for confirming the order.7. Click Next. After you pay for your instance, you can view it on the homepage.

Figure 1-2 Viewing a DAYU instance

8. When you return to the DAYU management console, the Authorize Accessdialog box is displayed, prompting you to authorize the listed services.Select all services and click Agree. The platform automatically creates anagency. After the authorization is complete, the Authorize Access dialog boxwill not be displayed when you access the DAYU console home page nexttime.If you select only some services for authorization, the system still displays thedialog box next time you access the DAYU console home page, prompting youto authorize access to unauthorized cloud services.DAYU interacts with the cloud services listed in Figure 1-3 and needs tocollaborate with these cloud services. Therefore, you need to create a cloudservice agency to delegate permissions to DAYU so that DAYU can use thesecloud services and perform task scheduling and resource O&M on behalf ofyou.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 4

Page 8: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Figure 1-3 Authorize Access dialog box

9. In the list of instances, locate the instance you just bought and click Access toaccess the DAYU management console.

Free Trial Use and Console Access for a Basic DAYU Instance

Context

● Any single account can only take advantage of this free trial once.

● You can use a sample DAYU instance of basic version for 30 days. After thetrial period expires, you need to buy an instance of one of the official versionsprovided.

● If you try the basic version, but you then buy the starter version, the resourcescreated during the trial period will be released.

● During the trial period, you can buy any official version of DAYU, but the trialperiod will expire immediately.

● Resources created during the trial period cannot be accessed once the trialperiod expires. After the trial period expires, data will be deleted seven dayslater. You will take full responsibility for any losses resulting from not buying aDAYU instance in time. To access the free trial:

1. Log in to the public cloud management console.

2. Click in the upper left corner of the page to select a region.

3. In the upper left corner of the console, click (the Service List icon) andchoose Enterprise Intelligence > DAYU.

4. Click Try Basic. Access the page for trying a basic DAYU instance.

5. Configure the instance parameters. Refer to Table 1-1 for details.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 5

Page 9: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Table 1-2 DAYU instance parameters

Parameter Example Description

Region CN North-Beijng1

The region where the DAYU instanceresides. Resources in different regionscannot communicate with each other. Takecare when selecting the region.

AZ AZ2 The availability zone (AZ). Select an AZ byreferring to Region and AZ.

InstanceName

DAYU-test The name of your DAYU instance.

VPC vpc1 The VPC, subnet, and security group wherethe DAYU instance resides, which are usedto communicate with the desired datasource.For more information, see Virtual PrivateCloud User Guide.

Subnet subnet-1

SecurityGroup

sg-1

EnterpriseProject

default This parameter is available only when anenterprise project has been created on theEnterprise Project Management page.An enterprise project facilitatesmanagement of cloud resources. For moreinformation, see Enterprise ManagementUser Guide.

6. If there is no need to change the current configuration details, click Try Now.7. In the Free Trial Agreement dialog box that is displayed, select I have read

and agreed to these terms and click OK.8. In the list of trial instances, locate your instance and click Access to access the

DAYU management console.

1.4 (Optional) Buying a DAYU Incremental PackageDAYU is billed on a basic package + incremental package basis. The basic packageis billed for on a yearly or monthly basis. There are two types of incrementalpackages: DIS packages and CDM packages, both of which are billed for by usageor bundle.

This section describes how to buy a DAYU incremental package. Before buying aDAYU incremental package, ensure that you have bought DAYU instances.

● Real-time data ingestionReal-time data ingestion addresses the challenge of transmitting data fromoutside the cloud to the inside. It builds data intake streams for customapplications capable of processing or analyzing streaming data.If you want to use the real-time data ingestion function, you need to buy areal-time DIS incremental package after buying a DAYU basic packageinstance. Otherwise, skip this part. Refer to the following links for details:

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 6

Page 10: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

a. Buying a DIS Incremental Package (On-demand)b. Buying a DIS Incremental Package (Package)

● Batch data migrationA DAYU instance includes a CDM cluster. If the cluster meets yourrequirements, you do not need to buy a CDM incremental package.Batch data migration can be implemented between more than 20homogeneous or heterogeneous data sources. If you want to buy a CDMincremental package, refer to the following links for details:

a. Buying a CDM Incremental Package (On-demand)b. Buying a CDM Incremental Package (Package)

Context● When you buy a pay-per-use incremental package, the system automatically

creates a CDM cluster or DIS stream based on your selected specifications.● Bundle-based incremental packages do not include a CDM cluster or DIS

stream. If you only buy one bundle-based incremental package, the packagedoes not affect the purchased duration because there is no CDM cluster orDIS stream.

● If you want to enjoy the preferential price afforded by a bundle-basedincremental package, you need to buy a pay-per-use incremental package anda bundle-based incremental package in the same region and workspace. Thetwo packages must have the same specifications.

Buying a DIS Incremental Package (On-demand)1. Locate an enabled instance and click Buy.

Figure 1-4 Buying an incremental package

2. Access the page for buying a DIS incremental package and set parameters.Refer to Table 1-3 for parameter details.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 7

Page 11: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Figure 1-5 Configuring parameters for a DIS incremental package

Table 1-3 Parameters

Parameter Description

Incremental PackageType

Select DIS.

BillingMode

Select On-demand.

Workspace Select the workspace where the DIS incremental package willbe used. For example, if you want to buy a DIS incrementalpackage in the A workspace of the DAYU instance test, selectA. After the purchase is successful, you can view the createdstream in the workspace A.

StreamName

The name of the DIS stream to be created. A stream namemust be unique. They can be up to 64 characters long. Onlyletters, digits, hyphens (-), and underscores (_) are allowed.

Partitions Partitions are the base throughput unit of a DIS stream.● For a common DIS stream, the value of Partitions is an

integer from 1 to 50. A tenant can create a maximum of50 partitions.

● For an advanced DIS stream, the value of Partitions is aninteger from 1 to 10. A tenant can create a maximum of10 partitions.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 8

Page 12: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Parameter Description

PartitionCalculator

This tool estimates how many partitions are needed based onthe information you entered.1. Click Partition Calculator.2. In the Partition Calculator dialog box, configure the

Average Record Size (KB), Max. Records Written, andConsumer Applications parameters. The EstimatedPartitions field then displays the recommended number ofpartitions. The value of this field cannot be modified.NOTE

Partition calculation formulas:● Based on the traffic (the final value must be rounded up):

Common stream: Average record size x (1 + 20%) x Max. writerecords/(1 x 1024 KB) (20% is the reserved partitionpercentage.)Advanced stream: Average record size x (1 + 20%) x Max. writerecords/(5 x 1024 KB) (20% is the reserved partitionpercentage.)

● Based on the consumer program quantity (the final value mustbe rounded up):(The number of consumer programs/2) x The number ofpartitions calculated based on the traffic (The result of thenumber of consumer programs/2 must reserve two decimals.)The larger value calculated based on the previous two formulasis considered as the estimated partition value.

3. Click Use Estimated Value. The estimated value isautomatically used as the value of Partitions.

DataRetention(days)

The maximum number of days for which data can bepreserved in real-time DIS streams. Data will be deleted whenthis retention period expires.Value range: an integer ranging from 1 to 7

SourceData Type

● BLOB: a collection of binary data stored as a single entityin a database management system. If Source Data Type isset to BLOB, the supported Dump Destination can be OBSor MRS.

● JSON: an open-standard file format that uses human-readable text to transmit data objects consisting ofattribute–value pairs and array data types. If Source DataType is set to JSON, the supported Dump Destination canbe OBS, MRS, DLI, CloudTable, or DWS.

● CSV: a simple text format for storing tabular data in aplain text file. If Source Data Type is set to CSV, thesupported Dump Destination can be OBS, MRS, DLI, orDWS.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 9

Page 13: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Parameter Description

AutoScaling

You can choose to enable or disable auto scaling whencreating a stream.

You can set this to or , respectively, to enableor disable auto scaling.NOTE

You can choose whether to enable auto scaling when creating astream. You can also modify the auto scaling attributes for a createdstream.

Down To The lower limit for automatic scale-down. The number oftarget partitions for automatic scale-down cannot drop belowthis lower limit.

Up To The upper limit for automatic scale-up. The number of targetpartitions for automatic scale-up cannot exceed this upperlimit.

3. Click Buy Now, confirm the specifications, and submit the order.4. After the purchase is completed, you can view the purchased real-time DIS

stream in the corresponding workspace.

Figure 1-6 Viewing a stream

Buying a DIS Incremental Package (Package)1. Locate an enabled instance and click Buy.

Figure 1-7 Buying an incremental package

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 10

Page 14: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

2. Access the page for buying a DIS incremental package and perform thefollowing operations:

a. Incremental Package Type: Select DIS.b. Billing Mode: Select Package.c. Resource Package Type: Select Common Stream Partition Hour.d. Required Duration: Specify a validity period for the package.e. Quantity:The number of subscribed packages. For example, if you specify

1 month for Required Duration and 2 for Quantity, you will have a1500-hour quota and the validity period is 1 month.

3. Click Buy Now, confirm the specifications, and submit the order.

Buying a CDM Incremental Package (On-demand)1. Locate an enabled instance and click Buy.

Figure 1-8 Buying an incremental package

1. Access the page for buying a CDM incremental package and set parametersby referring to Figure 1-9.

Figure 1-9 Configuring parameters for a CDM incremental package

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 11

Page 15: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Table 1-4 Parameters

Parameter Description

Incremental PackageType

Select CDM.

BillingMode

Select On-demand.

AZ Regions and AZs describes the details of AZ.

Workspace Select the workspace where the CDM incremental packagewill be used. For example, if you want to buy a CDMincremental package in the A workspace of the DAYUinstance test, select A. After the purchase is successful, youcan view the created CDM cluster in the A workspace.

ClusterName

The name of your CDM cluster.

InstanceType

The following lists the specifications supported by the CDMcluster.● cdm.medium: 4 vCPUs and 8 GB of memory. The

maximum and assured bandwidths are 1.5 Gbit/s and 0.4Gbit/s. Up to 20 jobs can be concurrently executed. Thisflavor is well suited to migration of a single database tablewith fewer than 10 million pieces of data.

● cdm.large: 8 vCPUs and 16 GB of memory. The maximumand assured bandwidths are 3 Gbit/s and 0.8 Gbit/s. Up to30 jobs can be concurrently executed. This flavor is wellsuited to migration of a single database table with 10million pieces of data or more.

● cdm.xlarge: 16 vCPUs and 32 GB of memory. Themaximum and assured bandwidths are 10 Gbit/s and 4Gbit/s. Up to 100 jobs can be concurrently executed. Thisflavor is well suited to TB-level data migration requiring10GE high-speed bandwidth.

VPC The VPC, subnet, and security group that the CDM clusterbelongs to. The CDM cluster must be able to communicatewith the data source to be connected. They can be selectedaccording to residing networks of the migration source anddestination.● If the CDM cluster and the data source to be connected

belong to different VPCs or the data source is on-premises,the CDM cluster needs to be bound to an elastic IP address(EIP).

● If the data source is a cloud service, you are advised toconfigure the network of the CDM cluster to be the sameas that of the cloud service. The CDM cluster does notneed to be bound to an EIP.

Subnet

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 12

Page 16: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Parameter Description

SecurityGroup

● If the data source is a cloud service, and the CDM clusterand the cloud service are in the same VPC but differentsubnets, configure security group rules to interconnect theCDM cluster with the cloud service.

For more information, see Virtual Private Cloud User Guide.

2. Click Buy Now, confirm the specifications, and submit the order.

3. After the purchase is completed, you can view the purchased CDM cluster inthe corresponding workspace.

Buying a CDM Incremental Package (Package)1. Locate an enabled instance and click Buy.

Figure 1-10 Buying an incremental package

2. Access the page for buying a CDM incremental package and perform thefollowing operations:

a. Incremental Package Type: Select CDM.

b. Billing Mode: Select Package.

c. Usage Duration: Indicates the validity period of a package.

d. Purchase Quantity: Indicates the number of subscribed packages. Forexample, if you specify 1 month for Usage Duration and 2 for PurchaseQuantity, you will have a 1490-hour quota and the validity period is 1month.

3. Click Buy Now. If there is no need of changes for the specifications, submitthe order.

1.5 Creating a WorkspaceThis section describes how to create a workspace. By default, a workspace named"default" is created for a user who bought a DAYU instance. The user is assignedthe role of the administrator. You can use the default workspace or create aworkspace by referring to this section.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 13

Page 17: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

A workspace enables the administrators to manage user (member) permissions,resources, and the configurations of the underlying compute engines.

The workspace is a basic unit for member management as well as role andpermission assignment. Each team has an independent workspace.

You can access Management Center, Data Assets, Data Quality Control, DataDesign, Data Integration, and other modules only after your account is added toa workspace and assigned the relevant permissions.

In the Workspace Management tab, users can be added to a workspace andassigned roles such as Administrator, Developer, O&M engineer, and Visitorthat are preset on DAYU.

Prerequisites● Check whether a DAYU instance has been bought. Refer to Obtaining a

DAYU Instance for details.

Context● A workspace is created for any user who bought a DAYU instance, by default.

That user is also assigned the role of administrator.● By default, only HUAWEI CLOUD accounts can create, modify, and delete

workspaces and add workspace members. By default, a HUAWEI CLOUDaccount has all permissions for DAYU.

● Only users with the DAYU Administrator or Tenant Administrator policiescan create, modify, or delete workspaces. You need to assign the polices tousers as required.Users with the DAYU Administrator policy have all permissions for DAYU bydefault.The Tenant Administrator policy has all cloud service administratorpermissions except the IAM management permission. For security purposes,you are not advised to grant this permission to IAM users. Exercise cautionwhen performing this operation.

● Only users who have the Security Administrator policy and are assigned theDAYU workspace administrator role have the permissions to add workspacemembers.

● A user who has been assigned the DAYU User policy can view a workspaceonly after being added to the space.

Creating a Workspace1. Log in to the DAYU management console using an administrator account.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 14

Page 18: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Figure 1-11 Accessing the DAYU management console

2. Click Workspace Management.3. On the displayed page, click Create. Enter a workspace name and click OK.

1.6 Authorizing IAM Users to Use DAYU

1.6.1 Creating a User and Granting DAYU PermissionsThis chapter describes IAM fine-grained permissions management for your DAYU.With IAM, you can:

● Use your HUAWEI CLOUD account to create IAM users for employees basedon the organizational structure of your enterprise. Each IAM user has theirown security credentials, providing access to DAYU resources.

● Grant users only the permissions required to perform a task.● Entrust a HUAWEI CLOUD account or cloud service to perform professional

and efficient O&M on your DAYU resources.

If your HUAWEI CLOUD account does not need individual IAM users forpermissions management, then you may skip over this chapter.

This section describes the procedure for granting permissions (see Creating anIAM User and Granting DAYU Permissions).

Context● Before granting permissions to a user group, you need to learn about the

DAYU workspace role permissions that can be added to the user group andselect the permissions based on site requirements. For details about thesystem permissions supported by DAYU, see Service Overview > DAYUPermission Management in DAYU User Guide.

● For the system policies of other services, see Permissions Policies.

Creating an IAM User and Granting DAYU Permissions1. Create a user group and assign permissions..

Log in to the IAM console using a HUAWEI CLOUD account, create a usergroup, and assign the DAYU permissions to the group. For example, assignDAYU User to the group. In addition, you need to grant users the permissionsof other cloud services on which DAYU depends.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 15

Page 19: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

● To create a workspace for an IAM user, you need to grant the DAYU Administratorpolicy to the IAM user. The DAYU Administrator role has all the executionpermissions of DAYU.

● The DAYU Administrator policy is not granted to the old user. To obtain thispermission, log in to the IAM console and grant it to the user.

2. Create an IAM user..Create a user on the IAM console and add the user to the group created instep 1.

1.6.2 Adding a Workspace Member and a RoleThis section describes how to add workspace members and roles, the permissionsassigned to those roles, and the differences between different roles.

If you only want to use the DAYU instance yourself, you can skip this section.

If you plan to allow other users to use the DAYU instance, prepare IAM accounts,and create a workspace. Refer to Creating a User and Granting DAYUPermissions and Creating a Workspace for details.

ContextOnly administrators who are assigned the Security Administrator policy can addmembers to the workspace.

Adding a Member and a Role1. Log in to the DAYU management console via a DAYU instance. Click

Workspace Management.2. On the displayed page, click Member Management in the Operation

column.

Figure 1-12 Managing members

3. Click Add under Workspace Member. The Add Member dialog box isdisplayed. Select a member account from the drop-down list and set the role.Click OK.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 16

Page 20: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Figure 1-13 Adding members

4. You can view or modify the members and roles in the member list, or delete amember from the workspace.

5. Workspace members include administrators, developers, O&M engineers, andvisitors. The default role of a workspace creator is administrator. For detailsabout the permissions of each role, see DAYU permission list.

1.7 (Optional) Obtaining the AuthenticationInformation

When DAYU is used for batch migration of data from on-premises servers to thecloud, Object Storage Service (OBS) is required to store the data. You will need toobtain an Access Key ID (AK) and Secret Access Key (SK) to access OBS.

Obtaining an AK/SK1. Log in to the HUAWEI CLOUD, hover your cursor over the username in the

upper right corner of the page, and select Basic Information from the drop-down list.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 17

Page 21: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

2. On the My Account page, choose Account Info > Manage,. The Account Infopage is shown in Figure 1-14.

Figure 1-14 Account Info page

3. On the My Credentials page, choose Access Keys > Add Access Key. TheAccess Keys page is shown in Figure 1-15.

Figure 1-15 Access Keys page

4. In the Add Access Key dialog box, select where the verification code will besent, and enter the verification code. The Add Access Key dialog box is shownin Figure 1-16.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 18

Page 22: Preparations - support.huaweicloud.comAn account is an entity that accesses HUAWEI CLOUD. For details, see My Account . This section describes how to register a HUAWEI CLOUD account

Figure 1-16 Add Access Key dialog box

5. Click OK and save the access key file when prompted. The access key file issaved to your browser's configured download location. Open thecredentials.csv file to view the AK and SK.

Obtaining a Project IDA project is a group of tenant resources. To view the project IDs of differentregions, choose My Credentials > Projects.

DAYUPreparations 1 Initial Preparations

Issue 01 (2020-03-17) Copyright © Huawei Technologies Co., Ltd. 19