User Guide - HUAWEI CLOUD...Real-Name Authentication Process). If the account has registered as a...

Enterprise Management

User Guide

Issue 01

Date 2020-01-16

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2020. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without priorwritten consent of Huawei Technologies Co., Ltd. Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respectiveholders. NoticeThe purchased products, services and features are stipulated by the contract made between Huawei andthe customer. All or part of the products, services and features described in this document may not bewithin the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,information, and recommendations in this document are provided "AS IS" without warranties, guaranteesor representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Issue 01 (2020-01-16) Copyright © Huawei Technologies Co., Ltd. i

Contents

1 Enterprise Center.....................................................................................................................11.1 Overview.................................................................................................................................................................................... 11.2 Enabling the Enterprise Center...........................................................................................................................................11.3 Accessing the Enterprise Center......................................................................................................................................... 21.4 Disabling the Enterprise Center......................................................................................................................................... 31.5 Accounting Management..................................................................................................................................................... 41.5.1 Organizations and Accounts............................................................................................................................................ 41.5.1.1 Creating an Organization.............................................................................................................................................. 41.5.1.2 Creating a Member Account........................................................................................................................................ 51.5.1.3 Setting an Organization Policy.................................................................................................................................... 81.5.1.4 Associating Accounts....................................................................................................................................................... 81.5.1.4.1 Explanation of Same Legal Person......................................................................................................................... 81.5.1.4.2 Explanation of Different Legal Person...................................................................................................................81.5.1.4.3 Inviting a Member Account....................................................................................................................................... 81.5.1.4.4 Accepting an Association Invitation from a Master Account...................................................................... 121.5.1.5 Changing Account Permissions................................................................................................................................. 121.5.1.6 Modifying the Member Account Alias.................................................................................................................... 141.5.1.7 Disassociating Member Accounts.............................................................................................................................141.5.1.8 Changing the Organization for a Member Account.......................................................................................... 151.5.1.9 Viewing Order Information of Member Accounts.............................................................................................. 151.5.2 Managing Organization Policies.................................................................................................................................. 161.5.3 Allocation and Invoicing..................................................................................................................................................181.5.3.1 Allocating Account Balance, Credit Limit, and Cash Coupons....................................................................... 181.5.3.2 Withdrawing Account Balance, Credit Limit, and Cash Coupons..................................................................201.5.3.3 Viewing Financial and Expenditure Information of Member Accounts...................................................... 211.5.3.4 Issuing Invoices for Member Accounts................................................................................................................... 221.5.3.5 Setting a Repayment Priority Account....................................................................................................................231.5.4 Querying Fund Transfer Details.................................................................................................................................... 241.5.5 Exporting Expenditure Summary of Organizations and Accounts................................................................... 241.5.6 Exporting Expenditure Details of Organizations and Accounts.........................................................................251.5.7 Managing Budgets............................................................................................................................................................ 261.5.8 Obtaining Export Records............................................................................................................................................... 281.6 Quota........................................................................................................................................................................................ 28

Enterprise ManagementUser Guide Contents

Issue 01 (2020-01-16) Copyright © Huawei Technologies Co., Ltd. ii

1.7 FAQs.......................................................................................................................................................................................... 291.7.1 What Requirements Must an Account Meet to Function as a Master Account?........................................291.7.2 What Requirements Must an Enterprise Master Account Meet to Associate with Another Account?............................................................................................................................................................................................................ 301.7.3 What Are the Requirements for Canceling Associations Between an Enterprise Master Account andIts Member Account?.................................................................................................................................................................. 301.7.4 What Can I Do If the Master Account Cannot Associate with a Member Account Whose Type andCompany Name Have Not Been Specified?........................................................................................................................301.7.5 What Can I Do If the Master Account Cannot Associate with an Individual Member Account?.......... 311.7.6 In What Scenarios Does an Enterprise Master Account Create an Enterprise Member Account? WhatIs the Real-Name Authentication Information of the Created Member Account?............................................... 311.7.7 How Do I Apply for an Enterprise Management Account for Different Enterprises (the ParentCompany, Subsidiaries, and Branches)?............................................................................................................................... 321.7.8 How Does a Subsidiary Whose Shares Are Held by the Parent Company or Who Is Controlled by theParent Company Apply for Using the Commercial Discounts of the Parent Company?.....................................321.7.9 Why Can't the Member Account of My Company Enjoy the Same Commercial Preference as theMaster Account of the Parent Company?........................................................................................................................... 321.7.10 Can an Enterprise Master Account Allocate Funds to an Enterprise Member Account?.......................331.7.11 Why Can't an Enterprise Master Account Allocate Cash Coupons to a Member Account?................. 331.7.12 Can an Enterprise Master Account Allocate Credit Limit to an Enterprise Member Account?............331.7.13 Who Pays the Fee After an Enterprise Member Account Uses the Allocated Credit?............................ 331.7.14 Whose Invoices Will Be Issued for the Expenditures of a Member Account?............................................331.7.15 What Are the Differences Between IAM and Enterprise Management?..................................................... 341.7.16 What Are the Differences Between IAM Projects and Enterprise Projects?................................................361.7.17 What Are the Differences Between IAM Users and Enterprise Member Accounts?................................371.7.18 How Can I View All Enterprise Projects?.................................................................................................................381.7.19 Why Cannot the Permissions of Adding User Groups and Setting Policies Be Granted for EnterpriseProjects with the EPS Admin Policy Configured Through EPS?....................................................................................381.7.20 How Do I Obtain an Enterprise Project ID?........................................................................................................... 391.7.21 Why Is No Data Available After I Configured Application Monitoring Successfully on the SAP FullScreen Monitoring Page?.......................................................................................................................................................... 391.7.22 How Do I Add a Dedicated Account for the SAP Full Screen Monitoring?.................................................40

2 Project Management............................................................................................................ 422.1 Application Scenarios.......................................................................................................................................................... 422.2 Enabling the Enterprise Project Function..................................................................................................................... 442.3 Accessing the Project Management Page.................................................................................................................... 452.4 Resource Management....................................................................................................................................................... 462.4.1 Resource Management Overview................................................................................................................................ 462.4.2 Cloud Services Supported by EPS.................................................................................................................................462.4.3 Permissions.......................................................................................................................................................................... 472.4.3.1 Enterprise Project Permissions...................................................................................................................................472.4.3.2 Cloud Service Permissions........................................................................................................................................... 502.4.4 Viewing All Resources...................................................................................................................................................... 502.4.5 Managing Enterprise Projects....................................................................................................................................... 51


Issue 01 (2020-01-16) Copyright © Huawei Technologies Co., Ltd. iii

2.4.5.1 Creating an Enterprise Project................................................................................................................................... 512.4.5.2 Modifying, Enabling, or Disabling an Enterprise Project..................................................................................522.4.5.3 Selecting an Enterprise Project for a New Cloud Resource............................................................................. 542.4.6 Managing Enterprise Project Resources.................................................................................................................... 552.4.6.1 Viewing Enterprise Project Resources..................................................................................................................... 552.4.6.2 Adding Resources to an Enterprise Project........................................................................................................... 552.4.6.3 Removing Resources from an Enterprise Project................................................................................................ 572.4.6.4 Viewing Migration Events........................................................................................................................................... 582.4.7 Managing User Groups in an Enterprise Project.................................................................................................... 582.4.7.1 Viewing User Groups in an Enterprise Project..................................................................................................... 592.4.7.2 Adding a User Group to an Enterprise Project.....................................................................................................592.4.7.3 Removing User Groups from an Enterprise Project........................................................................................... 622.4.8 Managing Financial Information of Enterprise Projects...................................................................................... 622.4.8.1 Managing Enterprise Project Groups...................................................................................................................... 632.4.8.1.1 Creating an Enterprise Project Group.................................................................................................................. 632.4.8.1.2 Viewing Spend Information of an Enterprise Project Group....................................................................... 642.4.8.2 Accessing the Enterprise Project Accounting Information Page.................................................................... 652.4.8.3 Renewing the Resources of an Enterprise Project.............................................................................................. 662.4.8.4 Managing the Orders of an Enterprise Project....................................................................................................662.4.8.5 Managing the Bills of an Enterprise Project......................................................................................................... 662.4.8.5.1 Viewing and Exporting the Expenditure Summary of an Enterprise Project......................................... 672.4.8.5.2 Viewing the Expenditure Details of an Enterprise Project............................................................................682.4.8.5.3 Viewing the Cost Breakdown of an Enterprise Project.................................................................................. 682.4.8.5.4 Viewing the Bill Analysis of an Enterprise Project...........................................................................................692.4.8.5.5 Exporting Records....................................................................................................................................................... 712.4.8.6 Managing the Resources of an Enterprise Project..............................................................................................712.4.8.6.1 Unsubscribing from the Resources of an Enterprise Project........................................................................712.4.8.6.2 Changing the Billing Mode of an Enterprise Project...................................................................................... 722.4.8.7 Setting the Fund Quota of an Enterprise Project............................................................................................... 722.5 Application Management.................................................................................................................................................. 742.5.1 Overview...............................................................................................................................................................................742.5.2 Applications......................................................................................................................................................................... 752.5.2.1 Viewing an Application................................................................................................................................................ 752.5.2.2 Creating an Application............................................................................................................................................... 752.5.2.3 Modifying Applications................................................................................................................................................ 772.5.2.4 Deleting an Application............................................................................................................................................... 782.5.2.5 Creating a Monitoring Panel and Viewing Monitoring Data..........................................................................782.5.2.6 Application Management............................................................................................................................................792.5.2.7 SAP Full Screen Monitoring........................................................................................................................................ 802.5.3 Template Management................................................................................................................................................... 862.5.3.1 Example Templates....................................................................................................................................................... 862.5.3.2 My Templates.................................................................................................................................................................. 88


Issue 01 (2020-01-16) Copyright © Huawei Technologies Co., Ltd. iv

2.5.4 O&M Management........................................................................................................................................................... 932.5.4.1 Viewing O&M Tasks...................................................................................................................................................... 932.5.4.2 EVS Disk Expansion....................................................................................................................................................... 932.5.4.3 Application Backup and Restoration....................................................................................................................... 952.5.4.4 Application Disaster Recovery................................................................................................................................... 98


Issue 01 (2020-01-16) Copyright © Huawei Technologies Co., Ltd. v

1 Enterprise Center

1.1 Overview

1.2 Enabling the Enterprise Center

1.3 Accessing the Enterprise Center

1.4 Disabling the Enterprise Center

1.5 Accounting Management

1.6 Quota

1.7 FAQs

1.1 OverviewEnterprise Center is an enterprise cloud integrated management service thatprovides cloud organization management and accounting management forenterprise customers to manage personnel, accounting, and cloud resources byorganization. Enterprise Center standardizes enterprise operations on HUAWEICLOUD and meets enterprise IT governance requirements. It provides enterpriseorganization management and accounting management.

Accounting management allows multiple HUAWEI CLOUD accounts to beassociated with each other for accounting purposes. You can create a hierarchicalorganization and a master account, add member accounts to this organizationand associate them with the master account, and use the master account toperform accounting management of associated member accounts.

1.2 Enabling the Enterprise CenterEnterprise accounts are allowed to enable the enterprise center.

PrerequisitesYour account must have completed real-name authentication (see EnterpriseReal-Name Authentication Process). If the account has registered as a HUAWEICLOUD partner, it cannot be used to access the Enterprise Center.

Enterprise ManagementUser Guide 1 Enterprise Center

Issue 01 (2020-01-16) Copyright © Huawei Technologies Co., Ltd. 1

https://support.huaweicloud.com/en-us/usermanual-account/en-us_topic_0077914253.html


Procedure

Step 1 Go to the Basic Information page.

Step 2 Click Enable Enterprise Center.

The Enable Enterprise Center dialog box is displayed.

Step 3 Select I have read and agree with HUAWEI CLOUD Enterprise ManagementAgreement, and click Apply Now.

----End

1.3 Accessing the Enterprise Center

PrerequisitesThe account used for logging in to HUAWEI CLOUD must be an enterpriseaccount.

Procedure

Step 1 Log in to the HUAWEI CLOUD homepage.

Step 2 Click Console in the upper right corner.



https://account.huaweicloud.com/usercenter/?locale=en-us#/accountindex/accountInfo

https://www.huaweicloud.com/en-us

The management console is displayed.

Step 3 Choose Enterprise > Organizations and Accounts in the upper right corner of thepage.

By default, the Overview page is displayed.

● If the resolution of the screen is low, choose More > Enterprise > Organizations andAccounts to access the Enterprise Center.

● Alternatively, access the Basic Information page, and then click Access EnterpriseCenter to display the Overview page.

----End

1.4 Disabling the Enterprise CenterIf you no longer use the enterprise center, you can disable it on the Overviewpage.

Precautions● Disabling the enterprise center causes expenditure and budget data of the

enterprise organization to be permanently deleted. Even if the enterprisemaster account is re-enabled, the data cannot be restored.

● Disabling the enterprise center will also delete all organizations created bythe master account.

PrerequisitesNo valid member accounts are associated with the enterprise master account.

Procedure

Step 1 Go to the Overview page.

Step 2 Click Disable Enterprise Center in the upper right corner.




https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/allview

If the enterprise master account is associated with any member accounts, click Disassociateand disassociate it from all member accounts on the Organizations and Accounts page.

Step 3 Click Yes. The enterprise center is disabled successfully.

----End

1.5 Accounting Management

1.5.1 Organizations and Accounts

1.5.1.1 Creating an OrganizationAn enterprise master account can create an organization and add memberaccounts to this organization. In this way, the master account can view financialinformation by organization.

Creating an Organization

Step 1 Go to the Organizations and Accounts page.

Step 2 Click Create Organization in the upper left corner of the page.

Step 3 Specify the organization name, parent organization, and organization description.

Click Edit next to the Parent Organization field to modify the parent organization.

Step 4 Click Next.



https://account.huaweicloud.com/usercenter/#/enterpriseindex/organizationlist

The number of organization hierarchy levels cannot exceed three.

A maximum of 100 organizations (excluding root node organizations) can be created.

The system displays a message indicating that the organization is createdsuccessfully.

Step 5 Click Next to invite accounts to join this organization or click Complete. Addaccount later.

----End

Modifying or Deleting an Organization● To modify an organization name or description, locate the organization and

click Edit in the Operation column.● To delete an organization, locate the organization and click Delete in the

Operation column.

If an organization has subsidiary organizations or member accounts, the organizationcannot be deleted.

1.5.1.2 Creating a Member AccountA master account and its organizations can create new HUAWEI CLOUD accountsas member accounts. These new accounts are automatically associated with themaster account and inherit the following information about the master account:● Company name, country/region, signing entity, and account type Real-name

authentication information (when the enterprise master account hascompleted real-name authentication)

● Customer attribute if the master account belongs to a customer associatedwith a reseller (the same reseller and association mode)

Procedure


Step 2 Locate an enterprise or organization for which a member account is to be created.Click Add Member Account in the Operation column.

Step 3 Click Create Member Account.

The Create Member Account page is displayed.




Step 4 Set Account Name, Phone Number, Password and Email Address. Then, clickNext.

● If you select Mobile number bound to the master account for PhoneNumber, provide the following information about the member account.

● If you select Another mobile number for Phone Number, provide thefollowing information about the member account.

Step 5 Set Member Account Display Name, Relationship, and Permissions.



● To change the parent organization, click Edit next to the Subordinate Organizationfield.

● A newly created member account shares the real-name authentication information ofthe master account. The two accounts must belong to the same legal person.

● If the master account belongs to a customer of a reseller in prepayment mode, invoiceswill be issued by the reseller.

Step 6 Click Next.

The system displays the member account information for your confirmation.

Step 7 Click Submit.

The system displays a message indicating the member account is created.

Step 8 Click Finish.

----End

Follow-up Operations

After the member account is created with the option Another mobile number forPhone Number, HUAWEI CLOUD will send an SMS notification of memberaccount activation to the mobile number and an email to the preset email box,indicating that the association request is approved, the member account isactivated, and the password needs to be reset.

After receiving the email, perform the following steps to set a password for themember account, which can be used to log in to HUAWEI CLOUD:

Step 1 Log in to the email box registered for the member account, and open the emailsent from HUAWEI CLOUD.

Step 2 Click here in the email.

Step 3 Set a password.



Step 4 Click OK.

----End

1.5.1.3 Setting an Organization PolicyA master account uses an organization policy to control cloud resourcepermissions of all member accounts in the organization. Each organization canhave one or more organization policies.

Procedure


A list of organizations linked with the master account is displayed.

Step 2 In the same row as the organization for which you will set an organization policy,choose More > Set Organization Policy in the Operation column.

Step 3 Enable or disable the chosen organization policy.

In the Inherited Policy area, the policies inherited from the parent organization and theparent organization name are displayed.If no policy is set, the organization, subsidiary organizations, and all member accountsunder this organization will have all cloud resource permissions.If the policy Forbid network changes is enabled, the organization cannot create, modify, ordelete VPCs, networks, subnets, bandwidths, IP addresses, access control lists, or securitygroups.After a policy is set for an organization, the policy will be applicable to all memberaccounts under this organization.

Step 4 Click OK.

----End

1.5.1.4 Associating Accounts

1.5.1.4.1 Explanation of Same Legal Person

The Same Legal Person relationship indicates that the master account andmember account belong to the same enterprise legal person. This relationshiprequires that the two accounts must belong to enterprise users with the sameenterprise name, and both accounts must have completed real-nameauthentication.

1.5.1.4.2 Explanation of Different Legal Person

The Different Legal Person relationship indicates that the master and memberaccounts belong to different legal persons. This relationship requires that bothaccounts have completed real-name authentication.

1.5.1.4.3 Inviting a Member Account

An enterprise master account (for which the enterprise management function hasbeen enabled) can invite another account on the Invite Existing Account page to




function as its member account. The enterprise master account and the account tobe invited must meet the following requirements:

● The account to be invited must belong to an enterprise, have completed real-name authentication, and not be functioning as a master account.

● The account to be invited is not associated with other enterprise masteraccounts as a member account.

● The account to be invited must not be frozen.● The number of member accounts associated with the master account has not

reached the maximum allowed limit.● The account to be invited does not belong to a reseller.● If the master account is a customer associated with a reseller in prepayment

mode, it can only invite customers of the same reseller in prepayment modeto function as its member accounts.

● If the account to be invited is a customer associated with a reseller inprepayment mode, it can only be invited by a master account of a customerof the same reseller in prepayment mode to function as a member account.

Inviting an Account That Belongs to the Same Legal PersonStep 1 Go to the Organizations and Accounts page.

Step 2 Locate an enterprise or organization that the account to be invited belongs to.

Step 3 Click Add Member Account in the Operation column.

Step 4 Click Invite Existing Account.

The Invite Existing Account page is displayed.

Step 5 Set the account name and display name of the invited account. Click Next.

Step 6 Set Relationship and Permissions.




● The system automatically checks whether the account to be invited and master accountbelong to the same legal person. If yes, the system automatically sets the Relationshipfield to Same Legal Person.


● If you select Allow Member Account to Use Your Commercial Discounts, the memberaccount is allowed to inherit the tiered discounts of the master account.

● If the master account and member accounts belong to the same legal person, theseenterprise accounts can share the subscribed reserved instances with each other.


The system displays a message indicating that the invitation has been sent. Waitfor the account to accept the invitation.

The invitation can be canceled before it is accepted. To cancel the invitation, click theaccount name of the invited account on the Organizations and Accounts page, and thenclick Cancel Disassociation next to Status on the Account Information page.


----End

Inviting an Account That Belongs to a Different Legal Person


Step 2 Locate an enterprise or organization that the account to be invited belongs to.

Step 3 Click Add Member Account in the Operation column.


The Invite Existing Account page is displayed.

Step 5 Set the account name and display name of the invited account. Click Next.

Step 6 Set Relationship and Permissions.




● The system automatically checks whether the account to be invited and master accountbelong to the same legal person. If no, the system automatically sets the Relationshipfield to Non Same Legal Person.

● If Relationship is set to Non Same Legal Person, the master account cannot allocatecredit limit to the member account.

● If you select Allow Member Account to Use Your Commercial Discounts, the memberaccount is allowed to inherit the tiered discounts of the master account.


The system displays a message indicating that the invitation has been sent. Waitfor the account to accept the invitation.

The invitation can be canceled before it is accepted. To cancel the invitation, click theaccount name of the invited account on the Organizations and Accounts page, and thenclick Cancel Disassociation next to Status on the Account Information page.

Step 8 (Perform this step when the Allow Member Account to Use Your CommercialDiscounts option is selected.) Click Upload Now to upload the proof of associatedenterprises.

● If the Allow Member Account to Use Your Commercial Discounts option is selected,the proof of associated enterprises must be uploaded to prove that the master andinvited accounts belong to the same enterprise. After the submitted proof isauthenticated, the master account can share its commercial discounts with the memberaccount.

● The proof of associated enterprises can be uploaded later. You can click the memberaccount name and upload the proof on the Account Information page.

Step 9 (Perform this step when the Allow Member Account to Use Your CommercialDiscounts option is selected.) Upload the proof of associated enterprises, andselect According to term 2.4 in HUAWEI CLOUD Customer Agreement, Huaweiis entitled, as its sole discretion, to verify or authorize any third party toverify the information you have provided for the purposes of real-nameauthentication. You will be liable for any consequences resulting fromproviding inaccurate information.



You can download the proof template on the Invite Existing Account page or click todownload the template immediately.


----End

Viewing Member Account InformationTo view member account information, click the account name of the memberaccount on the Organizations and Accounts page. The Account Informationpage of the member account is then displayed.

1.5.1.4.4 Accepting an Association Invitation from a Master Account

The invited account can accept the association invitation on the My MasterAccount page.

Procedure

Step 1 Go to the My Master Account page using the invited account.

The inviter (master account) information is displayed.

Step 2 Click Accept to accept the invitation from the master account.

----End

1.5.1.5 Changing Account PermissionsA master account can submit a request for adding or canceling permissions for itsmember accounts. The permission change takes effect only after the memberaccount accepts the permission change request.

Procedure


Step 2 Locate an organization whose member account permissions need to be changed,and click Expand All next to the number of associated accounts.



https://account.huaweicloud.com/usercenter/?locale=en-us#/accountindex/associatedAccount

https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/organizationlist

Step 3 Locate the target member account and choose More > Change Permission in theOperation column.

The Account Information page is displayed.

Step 4 In the Permissions section, select the permission to be added, or deselect thepermission to be canceled. Click OK.

● If Forbid Member Account from Requesting Invoices is selected and the memberaccount has accepted the permission change request, then the member account cannotrequest invoices for itself.


● To view the permission change history of the member account, click View next toPermission Change History.

The system displays a message indicating that the permission change request hasbeen sent. Wait for confirmation from the member account.

Step 5 Click OK.



Step 6 Log in to the Enterprise Management console as the member account. Go to theMy Master Account page, and view the permission change request.

Step 7 Click Accept to grant the permission change request.

----End

1.5.1.6 Modifying the Member Account Alias

An enterprise master account can use aliases to name its member accounts sothat member accounts can be easily identified. It can modify the alias of amember account.

Procedure


Step 2 Locate an organization whose member account's alias needs to be changed, andclick Expand All next to the number of associated accounts.

Step 3 Locate the target member account and click Modify Alias in the Operationcolumn.

The Modify Alias dialog box is displayed.

Step 4 Change the alias, and click OK.

The system displays a message indicating that the alias has been successfullychanged.

----End

1.5.1.7 Disassociating Member Accounts

A master account can submit a request for disassociating its member accounts onthe Account Information page. Member accounts can accept or reject the requeston the My Master Account page. To disassociate a member account from itsmaster account, the member account must meet the following requirements:

● The member account must not have unreclaimed fund.● The member account must not have unreclaimed credit.● The member account must not have unreclaimed cash coupons.● The member account must not be in credit arrears.

Procedure


Step 2 Locate an organization whose member account needs to be disassociated from,and click Expand All next to the number of associated accounts.

Step 3 Locate the target member account and click Disassociate Account in theOperation column.

The Confirm dialog box is displayed.






After disassociation, you cannot allocate fund to or reclaim fund from the member account,and you do not have the permissions granted by the member account.Before the member account accepts the disassociation request, you can click CancelDisassociation in the Operation column to cancel the disassociation request.

Step 4 Click Yes.

The system displays a message indicating that the operation is successful.

Step 5 Go to the My Master Account page using the member account and view thedisassociation request.

Step 6 Click Accept to grant the disassociation request.

----End

1.5.1.8 Changing the Organization for a Member AccountA master account can change the organizations which its member accountsbelong to.

Procedure


Step 2 Locate an organization whose member account's organization needs to bechanged, and click Expand All next to the number of associated accounts.

Step 3 Locate the target member account and choose More > Change Organization inthe Operation column.

The Change Subsidiary Organization dialog box is displayed.

Step 4 Select another organization and click OK.

The subsidiary organization of the member account is changed successfully.

----End

1.5.1.9 Viewing Order Information of Member AccountsA master account can view and export order information of its member accounts.

PrerequisitesThe member account has accepted the request for the View SpendingInformation of Member Account permission.

Procedure

Step 1 Go to the Allocation and Invoicing page.

Step 2 In the Member Account column, click the display name of the member accountwhose order information you want to view.

The Account Information page is displayed.





https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/loanAndRecycling

Step 3 In the navigation pane, click Order Information.

The system lists all orders of the member account.

● To export order information of the member account, click Export above the order list.

● To view details of a single order, click the order number or click Details in theOperation column.

----End

1.5.2 Managing Organization PoliciesOrganization policies define cloud resource permissions of all member accountswithin an organization. For example, you can set an organization policy thatallows certain member accounts to purchase the VPC service.

Precautions● If no organization policy is defined, the organization, subsidiary organizations,

and all member accounts under this organization will have all cloud resourcepermissions.

● After a policy is defined for an organization, the policy will be applicable to allmember accounts under the organization.

Creating an Organization Policy

Step 1 Go to the Organization Policies page.

Step 2 Click the By Policy tab.

Step 3 Click Create Policy.

Step 4 On the Create Policy page, set policy information.



https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/policysManagement

For details about the JSON syntax, see Policy Language.

● Creating a Policy

a. Enter the basic information such as the policy name and description.b. Set Effect.c. Set Service and Permission.d. Click OK.

● Copying an Existing Policy

a. Enter the basic information such as the policy name and description.b. Click Copy Existing Policy.

The Copy Existing Policy dialog box is displayed.c. Select the policy you will copy.d. Click OK. The Action of the selected policy is displayed in the Policy

Content text box.e. Modify Action in the Policy Content text box to the action you want to

add in the new policy.f. Click Check Syntax.

If the syntax of the new policy is correct, the message "Policy contentvalidated successfully." is displayed.

g. Click OK.

----End

Modifying an Organization Policy


Step 2 Click the By Policy tab.

Step 3 Locate a policy to be modified and click Edit in the Operation column.

Step 4 Modify Policy Name, Description, and Policy Content.

Step 5 Click OK.

----End

Adding a Policy to an Organization


Step 2 Click the By Organization tab.

Step 3 In the Organizations tree on the left, select the organization to which a policy willbe added.

All policies of this organization, including the newly added and inherited policies,are displayed on the right of the page.

Step 4 Click Add Policy.



https://support.huaweicloud.com/en-us/usermanual-iam/iam_01_0017.html



Step 5 Select the policies to be added.

Step 6 Click OK.

● You can click before the policy name to view the content of the selected policy.

● You can click Cancel Policy in the Operation column to disassociate the policy from theorganization.

----End

1.5.3 Allocation and Invoicing

1.5.3.1 Allocating Account Balance, Credit Limit, and Cash Coupons

A master account can allocate its balance and credit limit to its member accounts.

It can also allocate its testing, commercial, and activity cash coupons issued byHUAWEI CLOUD to its member accounts.

Prerequisites

The member account belongs to the same legal person as the master account, orthe member account has been proven to be owned by a branch (not a subsidiary)of the enterprise of the master account through Huawei's review of the proof ofassociated enterprises. The member account must have accepted the masteraccount's request for the Allocate Credit to Member Account permission beforethe master account can allocate a credit limit to the member account.

The master account can allocate cash coupons to the member account only whenthe member account belongs to the same legal person as the master account.

Allocating Account Balance


Step 2 Locate a member account to which the master account will allocate accountbalance.

Step 3 Click Allocate in the Operation column.

The Select Allocation Method page is displayed.

Step 4 Click Account Balance.

The Account Balance page is displayed.

Step 5 Set the amount of account balance to be allocated and click Submit.


Step 6 Click Continue Allocating to go to the Select Allocation Method page, or clickBack to return to the Allocation and Invoicing page.

----End




Allocating Credit Limit

If the proof of associated enterprises has not been uploaded to prove both masterand member accounts belong to the same enterprise entity, go to the AccountInformation page of the member account to upload the proof.


Step 2 Locate a member account to which the master account will allocate credit limit.



Step 4 Click Credit Limit.

The Credit Limit page is displayed.

Step 5 Set the amount of credit limit to be allocated and click Submit.



----End

Allocating Cash Coupons

The cash coupons allocated by the master account to the member account inheritthe original usage limit, such as expiration time, available products, and coupontype.

When the master account allocates cash coupons that can be used on only onepurchase to the member account, it needs to allocate the total amount of thecash coupons.

The master account cannot allocate discount coupons to its member accounts.

If the master account is a reseller customer, it cannot allocate cash coupons to themember account. Contact the reseller to allocate cash coupons to the memberaccount.


Step 2 Locate a member account to which the master account will allocate cash coupons.



Step 4 Click Cash Coupon.

The Cash Coupon page is displayed.

Step 5 Select a cash coupon to be allocated, set Amount to Allocate, and click Submit.






If Allocatable Times is One, the master account needs to allocate the total amount of thecash coupon. The Amount to Allocate parameter cannot be configured.


----End

1.5.3.2 Withdrawing Account Balance, Credit Limit, and Cash CouponsA master account can withdraw the account balance, credit limit, and cashcoupons that are already allocated to a member account.

PrerequisitesThe member account belongs to the same legal person as the master account, orthe proof of associated enterprises has been authenticated to prove both accountsbelong to the same enterprise entity. The member account must have acceptedthe master account's request for the Allocate Credit to Member Accountpermission before the master account can withdraw the credit limit from themember account.

The master account can withdraw cash coupons from the member account onlywhen the member account belongs to the same legal person as the masteraccount.

Withdrawing Account Balance


Step 2 Locate a member account from which the master account will withdraw theaccount balance.

Step 3 Click Withdraw in the Operation column.

The Select Withdrawal Method page is displayed.

Step 4 Click Account Balance.

The Account Balance page is displayed.

Step 5 Set the withdrawn amount, and click Submit.


Step 6 Click Continue Withdrawing to go to the Select Withdrawal Method page, orclick Back to return to the Allocation and Invoicing page.

----End

Withdrawing Credit Limit


Step 2 Locate a member account from which the master account will withdraw the creditlimit.







Step 4 Click Credit Limit.

The Credit Limit page is displayed.

Step 5 Set the amount of credit limit to be withdrawn and click Submit.



----End

Withdrawing Cash Coupons

The master account can only withdraw the remaining amount of cash couponsthat are within validity period from the member account.


Step 2 Locate a member account from which the master account will withdraw the cashcoupons.



Step 4 Click Cash Coupon.

The Cash Coupon page is displayed.

Step 5 Select a cash coupon to be withdrawn and click Submit.



----End

1.5.3.3 Viewing Financial and Expenditure Information of Member Accounts

A master account can view financial and expenditure information of its memberaccounts.

Prerequisites

The member account has accepted your (the master account's) request for theView Accounting Information of Member Account and View SpendingInformation of Member Account permissions.

Viewing Financial Information






Step 2 Locate a member account whose financial information you want to view.

Step 3 Click Financial Info in the Operation column.

The Financial Infomation page is displayed. The system displays financialinformation of the member account, including Balance, Fund Balance andMonth-to-Date Spend.

You can click Dashboard in the Month-to-Date Spend area to view the monthlyexpenditure statistics of the member account.

----End

Viewing Expenditure Information


Step 2 Locate a member account whose expenditures you want to view.

Step 3 Click Dashboard in the Operation column.

The Dashboard page is displayed. The system displays monthly expenditures andbills of the member account.

----End

Viewing and Exporting Expenditure Details

You can click Expenditures in the navigation pane to view bills of cloud resources(either yearly/monthly or pay-per-use) by transaction, by resource, or by dedicatedcloud. To export expenditure details or bills, click Export on the Expenditurespage.

Viewing Export History

In the navigation pane, click Export History to view the history of expendituredata export.

Click Download in the Operation column to download the expenditure details to a localdirectory. The exported files will be automatically deleted three days after export.Download them in time.

1.5.3.4 Issuing Invoices for Member Accounts

A master account can issue invoices to member accounts.

Prerequisites

The member account has accepted your (the master account's) request for theRequest invoices for Member Account permission.




Procedure


Step 2 Locate a member account for which the invoice is to be issued.

Step 3 Click Invoices in the Operation column.

The Invoices page is displayed.

Step 4 Click New Invoice and set the invoice information of the member account asprompted.

For details, see Requesting a HUAWEI CLOUD Invoice.

----End

1.5.3.5 Setting a Repayment Priority Account

A master account can set one of its member accounts as the repayment priorityaccount. The top-up amount of the master account will be used to preferentiallyrepay the credits of this repayment priority account. If cash balance is availableafter the repayment, then it will be used to repay the credits of the masteraccount and other member accounts.

Context

A master account cannot be disassociated from a member account, unless thecredit used by the member account is paid. Top up the master account andconfigure the member account as the repayment priority account to preferentiallyrepay any billed or unbilled credit of the member account.

NO TICE

If you do not want to disassociate from the member account, do not set it as yourrepayment priority account.

Procedure


Step 2 Click Configure Repayment Priority Account in the upper part of the page.

If the Configure Repayment Priority Account function is unavailable, enable it first.

Step 3 Select the member account that needs repayment priority and click OK.




https://support.huaweicloud.com/en-us/usermanual-billing/en-us_topic_0031465734.html


Only one member account can be set as the repayment priority account.

The system displays a message indicating that the account has been set as therepayment priority account.

----End

1.5.4 Querying Fund Transfer DetailsA master account can view the cash balance details and credit limit details of themaster account and member accounts.

Procedure

Step 1 Go to the Fund Transfers page.

The cash balance details and credit limit details of the master account aredisplayed.

----End

1.5.5 Exporting Expenditure Summary of Organizations andAccounts

You can view and export the monthly summary of expenditure and unsubscriptionamount of your master account and its subordinate organizations and accounts inthe last 12 months.

Exporting Expenditure Summary of Organizations and Accounts

Step 1 Go to the Dashboard page.

Step 2 Set search criteria to filter the expenditure summary of organizations andaccounts.

Step 3 Click Export.

The Export dialog box is displayed.

Step 4 Reselect the Time, and click Export.

The expenditure summary filtered according to the search criteria is exported.



https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/transferRecords

https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/consumSum

Step 5 The Export History page is automatically displayed. Download the exported billson this page.

----End

Viewing Resource Bills of an Organization or Account

Step 1 Go to the Dashboard page.

Step 2 Locate an organization or account whose resource bills are to be viewed, and clickView Resource Spend in the Operation column.

Step 3 Select the time to view the monthly resource bills. The resource bill overview ofthe organization or account in the selected month is displayed.

----End

1.5.6 Exporting Expenditure Details of Organizations andAccounts

You can view the expenditure details of organizations and accounts in the last 12months.

Exporting Expenditure Details of Organizations and Accounts

Step 1 Go to the Expenditures page.

Step 2 Click a tab to view the expenditure details.

● Yearly/Monthly: Yearly/monthly bills are displayed by resource. A resourceonly has one bill record in a month.

● Pay-per-Use: Pay-per-use bills are displayed by resource. A resource only hasone bill record in a month.

Step 3 Locate an organization or account whose expenditure details are to be exported.



https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/consumSum

https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/consumResbill


Step 5 Set search criteria to filter the expenditure details to be exported.


The expenditure details filtered according to the search criteria are exported.

Step 7 The Export History page is automatically displayed. Download the exportedexpenditure detail bills on this page.

----End

1.5.7 Managing BudgetsCustomers can allocate budgets to organizations and accounts on a monthly,quarterly, or annual basis to ensure appropriate fund usage. If the budget balancewarning function is enabled and the expenditure of an organization or accountreaches the warning threshold, the system sends a warning message to the presetrecipient.

Precautions● A budget is controlled by organization level. When an account or project of an

organization incurs expenditures, the budgets of the account or project andthe parent organization are deducted.

● If an enterprise member account is transferred between organizations, theexpenditure before the transfer belongs to the original organization, and theexpenditure after the transfer belongs to the new organization. The yearly/monthly fees incurred after the transfer are immediately charged to the neworganization, and the pay-per-use fees are charged to the new organizationsince the next day of the transfer.

● If a new member account is associated with a master account, the previousexpenditure of the member account is not regarded as the expenditure of themaster account. If a member account is disassociated from a master account,the subsequent expenditure of the member account is not regarded as theexpenditure of the master account.

● No budget can be allocated to a member account before it is successfullyassociated with the master account.

Procedure

Step 1 Go to the Budget Management page.



https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/budgetManagement

Step 2 Click Add Budget in the Subject column.

The Add Budget page is displayed.

Step 3 Set the budget data. Table 1-1 lists the relevant parameters.

Table 1-1 Parameters of a budget

Parameter Description

Name Name of the new budget.

Budget Frequency Frequency of resetting the newbudget, which is monthly, quarterly, orannual basis.

Validity Period Validity period of the new budget. Thevalue must be a multiple of thebudget frequency.For example, if the budget frequency isQuarterly, the validity period can beset to 2019/01/01–2019/03/31.

Amount Amount of the new budget.

Budget Balance Warning● : Budget balance warning is

disabled.

● : Budget balance warning isenabled.

Warning Threshold When the budget usage reaches thethreshold, a warning message is sentto the preset message recipient.

Send To Recipient of a warning message sentwhen the budget usage reaches thethreshold.To specify recipients, click Set SMSRecipient.


A maximum of 10 undue budgets can be planned for a single organization or account.

----End

Other Operations● To modify a budget, locate it on the Budget Management page and click

Modify in the Operation column.



The budget frequency cannot be changed.

● To delete a budget, locate it on the Budget Management page and clickDelete in the Operation column.

● To view details about a budget, locate it on the Budget Management page,and click Details in the Operation column.

● To filter budgets, select a budget type from the Budget Filter drop-down list.

1.5.8 Obtaining Export RecordsAfter clicking Export on the Dashboard or Expenditures page on the enterprisemanagement console, you can download the exported content from the ExportHistory page.

Precautions

After the export requests take effect, the files are saved on the HUAWEI CLOUDObject Storage Service (OBS). The files will be automatically deleted three dayslater. Download the files before they are deleted.

Procedure

Step 1 Go to the Export History page.

Step 2 Locate an exported record and click Download in the Operation column.

The selected record can be downloaded to a local directory.

----End

1.6 QuotaOrganizations, organization policies, enterprise projects, and other items inEnterprise Management have quota limits. Table 1-2 lists the default quotas ofthese items.

Table 1-2 Restrictions

Item Quota Description

Member account 32 Maximum number ofenterprise memberaccounts that can beassociated with anenterprise masteraccount by default.



https://account.huaweicloud.com/usercenter/?locale=en-us#/enterpriseindex/exportRecords

Item Quota Description

Organization level 2 Maximum number oforganization levels thatcan be created, forexample, MasterAccount\Organization1\Organization 2.

Organization 100 Maximum number oforganizations that canbe created.

Organization policy 10 Maximum number oforganization policies thatcan be configured for anorganization.

Enterprise project grouplevel

1 Maximum number ofproject group levels thatcan be created, forexample, Account\Project Group 1.

Enterprise project group 100 Maximum number ofenterprise project groupsthat can be created.

Enterprise project 100 Maximum number ofenterprise projects thatcan be created.

User groups in anenterprise project

10 Maximum number ofuser groups that can beassociated with anenterprise project.

User group 10 Maximum number ofuser groups that can becreated.

User 50 Maximum number ofusers that can becreated.

1.7 FAQs

1.7.1 What Requirements Must an Account Meet to Functionas a Master Account?

To function as an enterprise master account, an account must meet the followingrequirements:



● Must have completed real-name authentication.● Is not associated with another enterprise account as a member account.● Must not belong to a HUAWEI CLOUD reseller.

1.7.2 What Requirements Must an Enterprise Master AccountMeet to Associate with Another Account?

To invite another account to function as its member account, the two accountsmust meet the following requirements:

● The account to be invited must have completed real-name authentication andis not functioning as an enterprise master account.

● The account to be invited is not associated with other enterprise masteraccounts as a member account.

● The account to be invited must not be frozen.● The number of member accounts associated with the enterprise master

account has not reached the maximum allowed limit.● The account to be invited must not belong to a HUAWEI CLOUD reseller.● If the enterprise master account is a customer associated with a reseller in

prepayment mode, it can only invite customers of the same reseller inprepayment mode to function as its member accounts.

● If the account to be invited is a customer associated with a reseller inprepayment mode, it can only be invited by a master account of a customerof the same reseller in prepayment mode to function as a member account.

1.7.3 What Are the Requirements for Canceling AssociationsBetween an Enterprise Master Account and Its MemberAccount?

To cancel the association with the master account, an enterprise member accountmust meet the following requirements:

● The member account must not have unreclaimed fund.● The member account must not have unreclaimed credit.● The member account must not have unreclaimed cash coupons.● The member account must not be in credit arrears.

1.7.4 What Can I Do If the Master Account Cannot Associatewith a Member Account Whose Type and Company NameHave Not Been Specified?

Ask the member account to specify the account type and company name, andthen associate with the member account. Complete the information of a memberaccount by performing the following procedure:

1. Go to the Basic Information page.2. Click Edit next to Company.




3. Set Account Type to Enterprise, and enter a company name.4. Click OK.

1.7.5 What Can I Do If the Master Account Cannot Associatewith an Individual Member Account?

Ask the member account to change to an enterprise account, and then associatewith the member account. A member account can change its account type ineither of the following scenarios:

● If the member account has not completed real-name authentication, it canchange to an enterprise account on the Basic Information page. On the BasicInformation page, click Edit next to Company, set Account Type toEnterprise, and enter a company name.

● If the member account has completed real-name authentication, it needs toperform real-name authentication again to change to an enterprise account.For details, see Changing to an Enterprise Account.

1.7.6 In What Scenarios Does an Enterprise Master AccountCreate an Enterprise Member Account? What Is the Real-Name Authentication Information of the Created MemberAccount?

An enterprise master account can create member accounts for multipledepartments or services in the same enterprise. The created member accounts willinherit the real-name authentication information of the master account.




1.7.7 How Do I Apply for an Enterprise Management Accountfor Different Enterprises (the Parent Company, Subsidiaries,and Branches)?

Perform the following steps:

1. Register an account on the HUAWEI CLOUD official website for eachenterprise and perform real-name authentication. For details, see Registeringan Account and Enterprise Real-Name Authentication Process.

2. Enable the enterprise master account function for one of the accounts, andassociate the other accounts as its member accounts. For details, seeEnabling the Enterprise Multi-Account Function and section "Inviting anAccount That Belongs to a Different Legal Person" in Inviting a MemberAccount.

1.7.8 How Does a Subsidiary Whose Shares Are Held by theParent Company or Who Is Controlled by the Parent CompanyApply for Using the Commercial Discounts of the ParentCompany?

When inviting the account of a subsidiary to function as a member account, theparent company (the enterprise master account) that obtains the commercialdiscounts must select the Allow Member Account to Use Your CommercialDiscounts permission and upload a proof of associated enterprise with the officialseal of the parent company. The proof must be approved by HUAWEI CLOUD andthe member account must accept the invitation before it can take effect. You candownload the Template for Proof of Associated Enterprises.

For details, see the section "Inviting an Account That Belongs to a Different LegalPerson" in Inviting a Member Account.

1.7.9 Why Can't the Member Account of My Company Enjoythe Same Commercial Preference as the Master Account ofthe Parent Company?

The possible reasons and solutions are as follows:

1. The master account has not obtained a commercial discount. Contact theHUAWEI CLOUD account manager to apply for a commercial discount.

2. The master account has not applied for the Allow Member Account to UseYour Commercial Discounts permission. For details about applying for thepermission, see Changing Account Permissions.

3. The master account has not submitted the proof of associated enterprises.Upload the proof of associated enterprises with the official seal of the parentcompany and contact the HUAWEI CLOUD account manager for approvalprocess. You can download the Template for Proof of AssociatedEnterprises. For details, see the section "Inviting an Account That Belongs toa Different Legal Person" in Inviting a Member Account.






https://support.huaweicloud.com/en-us/usermanual-em/em_am_0008.html

https://support.huaweicloud.com/en-us/usermanual-em/en-us_topic_0103572062.html#en-us_topic_0103572062__ld002a078d104415dbc85c11a250b0ffb


https://support.huaweicloud.com/usermanual-em/resource/enterPriseTemplate.docx


https://support.huaweicloud.com/en-us/usermanual-em/en-us_topic_0084759962.html




1.7.10 Can an Enterprise Master Account Allocate Funds to anEnterprise Member Account?

Yes. The enterprise master account can allocate its account balance, credit limit,and cash coupons to the member account.

Note:

● According to the financial management requirements of HUAWEI CLOUD, ifthe enterprise master account and the member account belong to differentlegal persons, the master account cannot allocate its credit limit and cashcoupons to the member account.

● For details about allocating funds from an ecosystem partner to a customeraccount, see guides in Partner Center.

1.7.11 Why Can't an Enterprise Master Account Allocate CashCoupons to a Member Account?

The master and member account belong to different legal persons. In this case,according to the financial management requirements of HUAWEI CLOUD, themaster account cannot allocate cash coupons to the member account.

1.7.12 Can an Enterprise Master Account Allocate Credit Limitto an Enterprise Member Account?

The enterprise master account can allocate credit limit to the member accountwith the same real-name authentication information or of an enterprise branchafter the accounts have obtained post payment authorization.

Note:

A master account cannot allocate credit limit to a member account if the accountsbelong to different enterprises, such as a parent company and a subsidiary.

1.7.13 Who Pays the Fee After an Enterprise Member AccountUses the Allocated Credit?

The master account pays the fee if the member account belongs to the sameenterprise of the master account (with the same real-name authenticationinformation) or an enterprise branch.

1.7.14 Whose Invoices Will Be Issued for the Expenditures of aMember Account?

For a directly contracted enterprise customer of HUAWEI CLOUD, HUAWEI CLOUDissues the invoices to the company (with the authenticated real name) to whichthe member account belongs.

For information about invoices of a customer associated with a partner inprepayment mode, please contact the partner.



1.7.15 What Are the Differences Between IAM and EnterpriseManagement?

Enterprise Management enables enterprises to manage cloud resources by projectand organization level. It includes enterprise project, accounting, personnel, andapplication management. IAM is an identity management service that providesidentity authentication, permissions management, and access control.

Both IAM and Enterprise Management can be used to manage users and accesspermissions. However, Enterprise Management also allows accounting andapplication management, and supports more fine-grained authorization forresource usage. It is recommended for medium- and large-sized enterprises. Formore information about Enterprise Management, see the EnterpriseManagement User Guide.

Differences Between IAM and Enterprise Management● Enabling method

– IAM can be used free of charge immediately upon successful registrationwith HUAWEI CLOUD.

– Enterprise Management needs to be applied for from HUAWEI CLOUD.For details, see Enabling the Enterprise Project Function.

● Resource isolation– Using IAM, you can create multiple projects in a region to isolate

resources, and authorize users to access resources in specified projects.– Using Enterprise Management, you can create enterprise projects to

isolate resources across regions. Enterprise Management makes it easy toassign permissions for specific cloud resources. For example, you can addan Elastic Cloud Server (ECS) to an enterprise project, and assignpermissions to a user for it to manage the ECS in the project. The userthen can manage only this ECS.

● Supported services– For the cloud services supported by IAM, see Supported Cloud Services.– Enterprise Management supports the following services: ECS, Auto

Scaling (AS), Image Management Service (IMS), Elastic Volume Service(EVS), Virtual Private Cloud (VPC), Elastic IP (EIP), Content DeliveryNetwork (CDN), Relational Database Service (RDS), Distributed CacheService (DCS), Document Database Service (DDS), Cloud ContainerEngine (CCE), Advanced Anti-DDoS (AAD), Bare Metal Server (BMS),Dedicated Host (DeH), Cloud Service Engine (CSE), Scalable File Service(SFS), DevCloud, MapReduce Service (MRS), Elastic Load Balance (ELB),Distributed Database Middleware (DDM), Cloud Search Service (CSS),Cloud Stream Service (CS), Object Storage Service (OBS), DistributedMessage Service (DMS), Data Warehouse Service (DWS), NAT Gateway(NAT), and Data Lake Insight (DLI).

Relationship Between Enterprise Management and IAM● The functions of creating users and user groups are synchronous between

IAM and Enterprise Management.





https://support.huaweicloud.com/en-us/usermanual-em/em_am_0008.html

https://support.huaweicloud.com/en-us/productdesc-iam/iam_01_0024.html

● Before assigning permissions to user groups in Enterprise Management, youneed to enable fine-grained access control in IAM. If the system-definedpolicies cannot meet your requirements, you can create custom policies inIAM. The custom policies will then be synchronized to Enterprise Managementand can be associated with user groups in the two services.

● If a user group is granted permissions in both IAM and EnterpriseManagement, users in the group get permissions from the policies attachedto the group in the two services. Requests of these users will then beauthenticated based on the actions in the associated policies.– If the attached policies contain the same action, the effect of the action

in IAM takes the priority. For example, when a user requests for creatinga cloud server, the Deny effect defined in IAM is applied. Therefore, theuser cannot create cloud servers.A policy attached in an IAM project contains the following action:{ "Action": [ "ecs:cloudServers:create" ], "Effect": "Deny"}

A policy attached in an enterprise project contains the following action:{ "Action": [ "ecs:cloudServers:create" ], "Effect": "Allow"}

– All different actions in the policies attached in IAM and EnterpriseManagement will take effect. The following are two actions that allowusers to create and delete cloud servers.A policy attached in an IAM project contains the following action:{ "Action": [ "ecs:cloudServers:create" ], "Effect": "Allow"}A policy attached in an enterprise project contains the following action:{ "Action": [ "ecs:cloudServers:delete" ], "Effect": "Allow"}

Authentication ProcessWhen a user initiates an access request, the system authenticates the requestbased on the actions in the policies attached to the group to which the userbelongs. The following figure shows the authentication process.




Figure 1-1 Request authentication process

1. A user initiates an access request.2. The system looks for IAM project policies and then looks for matched actions

in the policies.3. If a matched Allow or Deny action is found, the system returns an

authentication result (Allow or Deny). Then the authentication is finished.4. If no matched actions are found in IAM project policies, the system continues

to look for enterprise project policies and matched actions.5. If a matched Allow or Deny action is found, the system returns an

authentication result (Allow or Deny). Then the authentication is finished.6. If no matched actions are found, the system returns a Deny. Then the

authentication is finished.

1.7.16 What Are the Differences Between IAM Projects andEnterprise Projects?

IAM ProjectsIAM projects group and physically isolate resources in the same region. Resourcescannot be transferred between IAM projects, but can only be deleted and thenrebuilt.

Enterprise ProjectsEnterprise projects group and manage resources across regions. Resources inenterprise projects are logically isolated from each other. An enterprise project cancontain resources in multiple regions, and resources can be directly transferredbetween enterprise projects. You cannot create projects in IAM after enabling



Enterprise Management. Enterprise projects will gradually replace IAM projects infuture and are recommended for flexible resource management.

1.7.17 What Are the Differences Between IAM Users andEnterprise Member Accounts?

IAM UsersIAM users are created using an account in IAM or Enterprise Management (UserManagement page). They are managed and granted permissions by the account.Bills generated by the IAM users' use of resources are paid by the account.

In an enterprise, if there are multiple employees who need to use the resourcespurchased from HUAWEI CLOUD through an account, the account can be used tocreate IAM users for these employees and assign permissions to the users forusing resources. The IAM users have their own passwords for accessing theresources under the account.

Enterprise Member AccountsEnterprise master accounts and member accounts are generated upon successfulregistration with HUAWEI CLOUD using mobile numbers. AccountingManagement of Enterprise Management allows multiple HUAWEI CLOUDaccounts to be associated with each other for accounting purposes. You can createa hierarchical organization and a master account, add member accounts to thisorganization, and associate them with the master account.

The master account can then allocate funds to the member accounts for them tomanage resources.

IAM users can be created using the master account and member accounts tomanage their resources.



1.7.18 How Can I View All Enterprise Projects?● When using the master account to log in to the Enterprise Management

console, you can view information about all enterprise projects.● When using a member account to log in to the Enterprise Management

console, you can also view information about all enterprise projects if thismember account has the global authorization granted by the master account.

1.7.19 Why Cannot the Permissions of Adding User Groupsand Setting Policies Be Granted for Enterprise Projects withthe EPS Admin Policy Configured Through EPS?

Operations related to user groups can be performed for all enterprise projects onlyafter the permission for these operations are granted by configuring globalpolicies. The policies set on the User Groups tab page on the Enterprise ProjectManagement page take effect only for specific enterprise projects. Theadministrator needs to add related policies to the global project of the user groupto which the subuser belongs on the IAM console.

You can choose either one of the following ways:

● Adding the EPS Admin policy to the global project of the user group to whichthe subuser belongs on the IAM console.

● Adding the Security Administrator policy to the global project of the usergroup to which the subuser account belongs on the IAM console.



Procedure

Step 1 Hover the mouse over the username in the upper right corner of the page, andclick Identity and Access Management from the drop-down list.

The IAM console is displayed.

Step 2 In the navigation pane on the left, click User Groups.

Step 3 Locate the user group to which the subuser belongs, and choose More >Configure Permission in the Operation column on the right.

The user group details page is displayed, and the User Group Permissions tabpage is displayed by default.

Step 4 Locate the Global project, and click Configure Policy in the Operation column onthe right.

The Configure Policy dialog box is displayed.

Step 5 Select the EPS Admin or Security Administrator policy.

Step 6 Click OK.

----End

1.7.20 How Do I Obtain an Enterprise Project ID?● By calling an API

Cloud services can be authorized by IAM to call the API that is used to querya list of enterprise projects. The returned project list contains the ID of eachenterprise project. For details about the APIs, see the Enterprise ProjectManagement Service API Reference.

● From the enterprise project details page

a. In the navigation pane of the Enterprise Management console, clickEnterprise Project Management.

b. Click the name of the target enterprise project to view its ID on thedisplayed details page.

1.7.21 Why Is No Data Available After I ConfiguredApplication Monitoring Successfully on the SAP Full ScreenMonitoring Page?

Rectify the fault based on the causes listed in Table 1-3.

Table 1-3 Troubleshooting

Possible Causes Solution

The SAP full screenconfiguration is incorrect orthe configured applicationhas been deleted.

In the SAP Full Screen Monitoring area, checkwhether the application, application SID,database, and database SID are configured asrequired. If they are incorrect, correct them andupdate the configuration.



https://support.huaweicloud.com/en-us/api-em/en-us_topic_0136314423.html

https://support.huaweicloud.com/en-us/api-em/en-us_topic_0136314423.html

Possible Causes Solution

The Agent and SAP plug-insare not installed on thecloud server in theapplication.

Install the Agent and SAP plug-ins, and wait forseveral minutes.

The Agent data is stillwithin the reporting cycle.

The reporting cycle from Cloud Eye to EPS is onceevery three minutes. Wait for three minutes andthen refresh the Agent data.

The cloud server metainformation is incorrectlymodified.

Update the monitoring configuration in the SAPFull Screen Monitoring area, and wait forseveral minutes.

The parameters in themetrics.ini configurationfile are incorrect.

Check whether the configuration file is consistentwith the actual application parameters.

The Agent and daemonprocesses are abnormal.

Check whether the Agent and Telecope processesare normal.

The Agent has not obtaineddata.

Run the ./sapmon –v command in /usr/local/telescope/plugins/sapmon to check whether anerror is reported when obtaining metrics.

1.7.22 How Do I Add a Dedicated Account for the SAP FullScreen Monitoring?

The system will be disconnected automatically if no operation is performed within30 minutes as an administrator account. You are advised to use the dedicatedaccount for full screen monitoring.

To add a dedicated display account for the SAP full screen monitoring, perform thefollowing steps.

Step 1 Hover the mouse over the username in the upper right corner of the page, andclick Identity and Access Management from the drop-down list.

The IAM page is displayed.

Step 2 Create a user group.

1. Click User Groups in the navigation pane on the left.2. Click Create User Group on the upper right of the page.3. Set the user group name and other information.4. Click OK.

Step 3 Create a dedicated display account for the SAP full screen monitoring.

1. Click Users in the navigation pane on the left.2. Click Create User on the upper right of the page.3. Set user information on the Create User page.



Set User Groups to the user group created in Step 2. For details, see Creatinga User and Adding It to a User Group.

4. Click OK.

Step 4 Configure permission policies for the user group.

1. Click User Groups in the navigation pane on the left.2. In the user group list, choose More > Configure Permission in the Operation

column on the right of the user group to which the created user belongs.3. Set policies for global project.

a. Click Configure Policy on the right of the global project.b. Select Tenant Guest from the Available Policies list.c. Click OK.

4. Set policies for all regions supported by the application management module.

a. Click Configure Policy on the right of the region project.b. Select Tenant Guest from the Available Policies list.c. Click OK.

The enterprise project is a global service, but the SAP full screen monitoringinvokes the region-level Cloud Eye service. Therefore, you need to set policies forthe current supported region.

----End



https://support.huaweicloud.com/en-us/qs-iam/iam_01_0031.html


2 Project Management

2.1 Application Scenarios

2.2 Enabling the Enterprise Project Function

2.3 Accessing the Project Management Page

2.4 Resource Management

2.5 Application Management

2.1 Application ScenariosYou can create enterprise projects based on the enterprise organization structure.Then you can manage resources across different regions by enterprise project,grant different permissions to user groups, and add them to enterprise projects.The following describes typical application scenarios of enterprise projects.

Scenarios Classified by BusinessIf an enterprise has multiple programs that need to be started or stoppedindependently without affecting each other, it can create an enterprise project foreach program for settlement and grant permissions to different persons tomanage resources of different programs.

For example, a game company launches multiple games, such as A, B, and C. Thecost of each game is calculated separately. Some games are popular and continueto operate. Others receive poor customer response and are discontinued after aperiod of time. In this case, the game company can register a HUAWEI CLOUDaccount and enable the enterprise project function. It can create an enterpriseproject for each game and set different user groups for these enterprise projects tomanage resources. Figure 2-1 shows the organization structure of the gamecompany, and Figure 2-2 shows the solution provided by HUAWEI CLOUD.

Enterprise ManagementUser Guide 2 Project Management


Figure 2-1 Organization structure

Figure 2-2 HUAWEI CLOUD solution

Scenarios Classified by Organization Structure and BusinessEnterprises can create enterprise projects and member accounts based on theorganization structure. The resources and networks of the member accounts areisolated from each other.

For example, an Internet enterprise needs to deploy the development environmentand production environment during software development. The former is used forAlpha, Beta, and Gamma tests, and the latter is used to calculate costs based onprograms (such as app program, mall program, and collaborative office program).The enterprise also requires that the two environments be isolated from eachother to prevent the development tests from affecting the cost accounting in theproduction environment. In this case, the Internet enterprise can register aHUAWEI CLOUD account and enable the enterprise master account function.Create member account 1 for the development environment and member account2 for the production environment and associate them with the enterprise masteraccount. Enable the enterprise project function and create enterprise projects A, B,and C for Alpha, Beta, and Gamma development environments, and then createenterprise projects D, E, and F for app program, mall program and collaborativeoffice program in the production environment. Set a user group for eachenterprise project to manage resources. Figure 2-3 shows the organizationstructure of the IT enterprise, and Figure 2-4 shows the solution provided byHUAWEI CLOUD.



Figure 2-3 Organization structure

Figure 2-4 HUAWEI CLOUD solution

2.2 Enabling the Enterprise Project FunctionEnterprise accounts are allowed to enable the enterprise project function.

PrerequisitesYour account must have completed real-name authentication (see EnterpriseReal-Name Authentication Process). If the account has registered as a HUAWEICLOUD partner, it cannot be used to access the Enterprise Project Managementpage.

Procedure

Step 1 Go to the Account Info page.

Step 2 Click Enable Enterprise Project Function.

The Enable Enterprise Project Function dialog box is displayed.






Step 3 Select I have read and agree with HUAWEI CLOUD Enterprise ManagementAgreement, and click Apply Now.

----End

2.3 Accessing the Project Management Page

PrerequisitesThe account used for logging in to HUAWEI CLOUD must be an enterpriseaccount.

ProcedureStep 1 Log in to the HUAWEI CLOUD homepage.

Step 2 Click Console in the upper right corner.

The management console is displayed.



https://www.huaweicloud.com/en-us/

Step 3 Choose Enterprise > Project Management in the upper right corner of the page.If the resolution of the screen is low, choose More > Enterprise > ProjectManagement to access the Project Management.

----End

2.4 Resource Management

2.4.1 Resource Management OverviewResource management allows you to view all resources on the cloud and manageenterprise projects.

Enterprise Project Management Service (EPS) provides a unified method tomanage cloud resources and personnel by enterprise project.

2.4.2 Cloud Services Supported by EPSThe following table lists the cloud services and resources that can be managed byenterprise projects.

Table 2-1 Resource types supported by enterprise projects

Product Type Resource Type

ECS ECS

AS AS group

IMS Private image

EVS Disk

VPC ● VPC● Security group

Bandwidth Shared bandwidth

EIP EIP

CDN Domain name

RDS Instance

DCS Instance

DDS Instance

CCE Cluster

AAD Instance

CSE Engine

BMS BMS



Product Type Resource Type

DDM Instance

CSS Cluster

DWS DWS cluster

CS ● Job● Cluster

SFS File system

MRS Cluster

ELB Load balancer

DLI ● Cluster● Queue

CDM Cluster

OBS Bucket

NAT Gateway NAT gateway

DLF Workspace

DMS ● Kafka instance● RabbitMQ instance

ModelArts Workspace

CloudTable CloudTable cluster

CCI Namespace

2.4.3 Permissions

2.4.3.1 Enterprise Project PermissionsAdministrator: The administrator can perform any operations on the EnterpriseProject Management page.

Subuser: A subuser's permissions are granted by the administrator. After a subuserlogs in to the Enterprise Project Management page, the subuser sees only theenterprise projects assigned by the administrator, and can only manage theresources allocated by the administrator. If the administrator sets a permissionpolicy for a subuser, the subuser has all the permissions included in the policy.

A policy is a set of permissions. It defines which operations on which cloud resources areallowed. Customize policies if the available policies are not suitable for the current usergroup. For details about policies, see Fine-grained Policy.




The administrator can use the system policy or a custom policy to set permissionsfor subusers. The policies related to enterprise projects include EPS Admin, EPSViewer, and EnterpriseProject_BSS_Administrator.

The permissions set in IAM are different from those in Enterprise Management.The administrator can select either IAM or Enterprise Management to manageresource permissions based on enterprise requirements. For details about thedifferences between the two services, see What Are the Differences BetweenIAM and Enterprise Management?

Table 2-2 Description of the Enterprise Management permissions

ServiceName

PermissionName

Permission Description TypicallyAssociatedPersonnel

EnterpriseManagement

EPSAdmin

● The Enterprise Managementadministrator policy, including allthe permissions related toenterprise project management andpersonnel management. The policyallows users to create enterprises,migrate resources, add users to usergroups, remove users from usergroups, and set policies for usergroups. The administrator can setthe policy in the Global service inIAM.

● The administrator policy of a singleenterprise project. The policy hasonly the permissions of the specifiedenterprise projects, includingmodifying, enabling, disabling, andviewing the specified enterpriseprojects. The administrator andusers granted the EPS Admin policyin IAM can set the EPS Admin policyin Enterprise Management.

Enterprise assetadministrators

EPSViewer

Read-only EPS user has the permissionto query enterprise projects.● Read-only permission on Enterprise

Management to view theinformation of all enterpriseprojects and users. Theadministrator can set the policy inthe Global service in IAM.

● Read-only permission of a singleenterprise project, which can be setin Enterprise Management by theadministrator and users granted theEPS Admin policy set in IAM.

Enterprise assetquery personnel



https://support.huaweicloud.com/en-us/iam_faq/iam_01_0101.html

https://support.huaweicloud.com/en-us/iam_faq/iam_01_0101.html

● EPS Admin: This policy grants all EPS permissions. The following is the policycontent:{ "Version": "1.1", "Statement": [ { "Effect": "Allow", "Action": [ "eps:enterpriseProjects:update", //Modify an enterprise project. "eps:enterpriseProjects:create", //Create an enterprise project. "eps:enterpriseProjects:enable", //Enable an enterprise project. "eps:enterpriseProjects:disable", //Disable an enterprise project. "eps:resources:list", //View the resource list. "eps:resources:add", //Add resources to an enterprise project. "eps:resources:remove", //Remove resources from an enterprise project. "iam:groups:list", "iam:policies:list", "iam:enterpriseProjectGroups:combine", "iam:enterpriseProjectGroups:listGroups", "iam:enterpriseProjectGroups:listPolicies" ] } ]}

● EPS Viewer: This policy grants the permissions to view basic information. Thefollowing is the policy content:{ "Version": "1.1", "Statement": [ { "Effect": "Allow", "Action": [ "eps:resources:list", "iam:enterpriseProjectGroups:listGroups", "iam:enterpriseProjectGroups:listPolicies" ] } ]}

● EnterpriseProject_BSS_Administrator: This policy grants all the operationspermissions of an enterprise project. The following is the policy content:{ "Version": "1.1", "Statement": [ { "Effect": "Allow", "Action": [ "bss:enterpriseProjectFundQuota:view", //View the fund quota settings of an enterprise project. "bss:enterpriseProjectCost:view", //View and export the cost breakdown of an enterprise project. "bss:enterpriseProjectFundQuotaFinance:view", //View the adjustments of an enterprise project's fund quota. "bss:renewal:view", //View the renewals of an enterprise project. "bss:renewal:update", //Enable or disable automatic renewal, renew manually, change from pay-per-use to yearly/monthly, and release resources. "bss:order:view", //View a yearly/monthly order. "bss:order:update", //Place a yearly/monthly order. "bss:unsubscribe:update", //Unsubscribe from resources and view unsubscriptions. "bss:bill:view", //View the expenditure summary of an enterprise project. "bss:bill:update", //Export the expenditure summary of an enterprise project. "bss:billDetail:view", //View the expenditure details of an enterprise project. "bss:billDetail:update" //Export the expenditure details of an



enterprise project. ] } ]}

For a subuser that has used an enterprise project, the permissions may change (the defaultenterprise project cannot be viewed, resources cannot be viewed, or resources cannot beadded to or removed from an enterprise project). Configure policies based on the requiredpermissions. For details, see Other Operations.

2.4.3.2 Cloud Service Permissions

Through Project Management, cloud service permissions are added to enterpriseuser groups for better management of cloud services. Currently, the followingcloud services are supported: ECS, AS, IMS, EVS, VPC, EIP, CDN, RDS, DCS, andDDS. For details about cloud service policy permissions, see PermissionDescription.

When these cloud services are associated with cloud services that do not supportEPS, the associated services must depend on other permissions to be managed.Three methods are available to configure dependent permission policies for usergroups:

● On the Project Management console, add permission policies to user groups.For details, see Adding a User Group .

● On the IAM console, create custom policies for user groups. For details, seeCreating Custom Policies.

● On the IAM console, add permission policies to user groups. For details, seeCreating and Authorizing a User Group.

KMS key pairs and server groups do not support permissions specifically for enterpriseprojects.

2.4.4 Viewing All ResourcesAll Resources displays the overview of resources under your account.

Currently, only part of resources can be queried. More services and resources willbe available in the future.

Step 1 In the navigation pane of the Project Management console, choose ResourceManagement.

The Enterprise Project Management page is displayed.

Step 2 In the navigation pane on the left, choose Resource Management > AllResources.

Step 3 View resources.

You can filter resources by resource type or search for resources by name. Bydefault, all resources are displayed in the list.



https://support.huaweicloud.com/en-us/usermanual-permissions/en-us_topic_0063498930.html

https://support.huaweicloud.com/en-us/usermanual-permissions/en-us_topic_0063498930.html




Step 4 View resource information.

You can click on the right of the search box to set the resource displayinformation, including the region, resource type, and enterprise project.

If you click a resource name, its overview is displayed on the right. You can alsoclick View Details in the upper right corner to go to the corresponding resourceconsole and view more details.

----End

2.4.5 Managing Enterprise Projects

2.4.5.1 Creating an Enterprise Project

You can create an enterprise project for a department or business.

The user who creates an enterprise project must be an administrator or a userwho has been associated with the EPS Admin policy on the IAM.

A maximum of 100 enterprise projects can be created in each account.



Step 2 Click Create Enterprise Project in the upper left corner.

The Create Enterprise Project dialog box is displayed.

Figure 2-5 Create Enterprise Project

Step 3 Set Name and Description, and click OK.



Table 2-3 Configuration rules


Name A project name can contain a maximum of 64 characters. Onlyletters, digits, underscores (_), and hyphens (-) are allowed. Itcannot contain any case-insensitive form of the word default.Example: project_A

Description Project description can contain a maximum of 512 characters.Example: The enterprise project is used to manage the resourcesof Project A.

----End

2.4.5.2 Modifying, Enabling, or Disabling an Enterprise ProjectYou can modify, enable, or disable enterprise projects when your business changes.

● Disabled enterprise projects are not modifiable.● Disabled enterprise projects are not displayed in the Enterprise Project drop-down list

box on pages of creating cloud resources. Resources and user groups cannot be addedto the disabled enterprise projects. If you want to use the enterprise projects, enablethem again.

● If an unfinished order contains the enterprise project that will be disabled, the enterpriseproject can be disabled only after the order is completed. Unfinished orders refer to theorders in the following states: pending payment, processing, pending review, pendingapproval.

● The default enterprise project cannot be modified or disabled.

Modifying an Enterprise ProjectTo modify the name or description of an enterprise project, perform the followingsteps:



Step 2 Locate the target enterprise project. Choose More > Modify in the Operationcolumn.

The Modify Enterprise Project dialog box is displayed.

Step 3 Modify the project name or description.



Table 2-4 Configuration rules


Name A project name can contain a maximum of 64 characters. Onlyletters, digits, underscores (_), and hyphens (-) are allowed. Itcannot contain any case-insensitive form of the word default.Example: project_A

Description Project description can contain a maximum of 512 characters.Example: The enterprise project is used to manage the resourcesof Project A.

Step 4 Click OK.

----End

Enabling an Enterprise Project

To use a disabled enterprise project again, enable it.



Step 2 Locate an enterprise project in the Disabled state. Click More and select Enable inthe Operation column.

The Enable Enterprise Project dialog box is displayed.

Step 3 Click Yes.

----End

Disabling an Enterprise Project

You can disable an enterprise project if you no longer need to use it because yourenterprise structure is adjusted or business is reduced.



Step 2 Locate an enterprise project in the Enabled state. Click More and select Disable inthe Operation column.

The Disable Enterprise Project dialog box is displayed.

Step 3 Click Yes.

----End



2.4.5.3 Selecting an Enterprise Project for a New Cloud ResourceWhen buying a cloud resource, you can select an enterprise project in the Enabledstate for the resource so that the resource can be managed at the project level.

New cloud resources cannot be added to a disabled enterprise project. You canadd cloud resources only after enabling the enterprise project.

You can add cloud resources to an enterprise project using either of the followingtypes of consoles:● EPS console● Using the Console of Cloud Services that Support EPS

Using the EPS ConsoleOn the details page of an enterprise project, click Create Resource or PlanNetwork in the upper right corner of the page to add required cloud resources tothe project. Currently, when creating resources, only the following four types ofcloud resources are supported: Elastic Cloud Server, Elastic Volume Service, ElasticIP, and Relational Database Service. When planning the network, Virtual PrivateCloud, VPC Peering Connection, and Security Group pages are supported.

For details about all cloud resources that can be managed by enterprise project,see 2.4.2 Cloud Services Supported by EPS.

Using the Console of Cloud Services that Support EPSYou can select an enabled enterprise project when configuring Enterprise Projecton the cloud resource creation page. New cloud resources can be managed by theselected enterprise project.

Take ECS as an example. Perform the following operations:

1. Log in to the management console.

2. Click in the upper left corner to select a region and a project.3. Under Computing, click Elastic Cloud Server.4. Click Buy ECS.

The Buy ECS page is displayed.5. Configure the ECS data and select the target enterprise project from the

Enterprise Project drop-down list.

Figure 2-6 Selecting an enterprise project

6. On the right side of the page, click Next.



7. On the page for you to confirm RI specifications, view details about theapplication and submit the application.You can view the ECS and the enterprise project to which the ECS belongs onthe Elastic Cloud Server page after the ECS is bought.

2.4.6 Managing Enterprise Project Resources

2.4.6.1 Viewing Enterprise Project Resources



Step 2 Locate the target enterprise project, and click View Resource in the Operationcolumn.

The enterprise project details page is displayed. View resources in the currententerprise project under the Resources tab. Resources information of all producttypes in all regions is displayed by default. You can perform Step 3 to filterresources.

Step 3 (Optional) Set the resource search criteria on the Resources page.

1. Set Region.2. Set Service.

All is selected by default. You can select a service type and then a resourcetype.

3. Set Resource Type.

All resources that meet the specified filter criteria are displayed on the lower partof the page.

When Service is set to EIP, you can view the associated instances, including only ECS,enhanced load balancer, BMS, and virtual IP address for the moment.

----End

2.4.6.2 Adding Resources to an Enterprise ProjectIf your need to group and manage resources based on your business or whenresource groups need to be changed, you can add or remove resources toreallocate them.

EPS allows allocation of cross-region resources to the same enterprise project formanagement.






The enterprise project details page is displayed. View resources in the currententerprise project under the Resources tab.

Step 3 Click Add.

The Add Resource dialog box is displayed.

Step 4 Select a mode.● Independent resources: Each resource is added as an independent resource.

You can add multiple independent resources at the same time.If other resources except the ECS are used, you must select this mode.You can select this mode to add ECSs to the enterprise project, but resourcesassociated with the ECSs, such as EIPs and EVS disks, are not added to theenterprise project.

● ECSs and ECS associated resources: You only need to select the ECSs to beadded, and the resources associated with the ECSs will be automaticallyadded to the enterprise project at the same time.This mode is available only when the resources to be added are ECSs.Currently, only ECSs and their associated EVS disks and EIPs can be added toan enterprise project at the same time.

Step 5 Select the enterprise project to which target resources belong.

All resources of the enterprise project are displayed in the lower part of the AddResource dialog box.

Step 6 Click next to Region or Product Type to filter resources.

The resources that meet the search criteria are displayed in the lower part of thedialog box.

When the migration mode is Independent resources, you can filter resources byproduct type.

Figure 2-7 Add Resource



Step 7 Select the resource to be added, and click OK.

After the resource is added, it appears in the resource list of the target enterpriseproject.

----End

2.4.6.3 Removing Resources from an Enterprise Project

If your need to group and manage resources based on your business or whenresource groups need to be changed, you can add or remove resources toreallocate them.

EPS allows removal of cross-region resources from the same enterprise project formanagement.

Resources can be removed from an enterprise project to which the resourcesbelong in the following two scenarios:

● Remove resources from the enterprise project to another enterprise project forresource management.

● Remove resources from the enterprise project if you no longer manage theresources in enterprise projects you created.




The enterprise project details page is displayed. View resources in the currententerprise project under the Resources tab.

Step 3 Select the resource to be removed, and click Remove.

The Remove Resource dialog box is displayed.

Step 4 Select a mode.

● Independent resources: Each resource is removed as an independentresource. You can remove multiple independent resources at the same time.

If other resources except the ECS are used, you must select this mode.

You can select this mode to remove ECSs from the enterprise project, butresources associated with the ECSs, such as EIPs and EVS disks, are notremoved from the enterprise project.

● ECSs and ECS associated resources: You only need to select the ECSs to beremoved, and the resources associated with the ECSs will be automaticallyremoved from the enterprise project at the same time.

This mode is available only when the resources to be removed are ECSs.Currently, only ECSs and their associated EVS disks and EIPs can be removedfrom an enterprise project at the same time.



Figure 2-8 Remove Resource

Step 5 Select the destination enterprise project to which resources are removed and clickOK.

Select an enterprise project to manage the resources as required.

By default, the default enterprise project is selected if you no longer manage theresources in enterprise projects you created.

The resources are removed from the enterprise project. You can view the resourcesin the resource list of the destination enterprise project.

----End

2.4.6.4 Viewing Migration Events

You can view details of migration events, including time, operator, operation,resource ID, source enterprise project, and destination enterprise project of eachevent.

Migration events of up to last seven days are listed.



Step 2 In the upper left of the enterprise project list, click View Migration Event.

The Migration Events page is displayed, listing the resource adding and removalevents.

----End

2.4.7 Managing User Groups in an Enterprise Project



2.4.7.1 Viewing User Groups in an Enterprise Project



Step 2 Locate the target enterprise project. In the Operation column, click More andselect View User Group.

The enterprise project details page is displayed. View information about usergroups in the current enterprise project under the User Groups tab.

----End

2.4.7.2 Adding a User Group to an Enterprise ProjectAfter you add a user group to an enterprise project and set policies for the usergroup, users in the user group have the permissions defined by the policies andcan use resources in the enterprise project. This section describes how to add auser group to an enterprise project.

Procedure

Step 1 In the navigation pane of the Project Management console, choose ResourceManagement > Enterprise Project Management.


Step 2 Locate the target enterprise project. In the Operation column, click More andselect View User Group.


Step 3 Click Add User Group.

The Add User Group dialog box is displayed.



Figure 2-9 Adding a user group

Step 4 (Optional) Query available user groups.

If the Available area displays too many user groups, enter the name of the usergroup to be added in the text box to search for it.

Step 5 Select the user group to be added, and click to move the user group to theSelected area.

A maximum of 10 user groups can be created in each master account. Therefore, amaximum of 10 user groups can be added to an enterprise project.

Step 6 Click Next to attach policies to the newly added user group. The policies definethe operations that the user group can perform on the enterprise project to whichthe user group belongs.

1. Select a policy. You can filter policies by selecting All policies, Custom policy,or System-defined policy from the drop-down list under Available. You canalso click Create Custom Policy to create your own policies.A maximum of 25 policies can be attached to each user group.– For details about how to create custom policies, see Creating Custom

Policies.– For details about cloud service permissions in system-defined policies, see

Cloud Service Permissions.






Figure 2-10 Setting a policy

2. Click to synchronize the selected policy to the Selected policy area.

– A policy is a set of permissions. It defines which operations on which cloudresources are allowed. Customize policies if the available policies are not suitablefor the current user group. For details about policies, see Applying for Fine-Grained Access Control.

– You need to grant the fine-grained access permissions before adding policies to auser group for the first time. Click Create Custom Policy to go to the Apply forFine-grained Access Control OBT page. Click Create Now, and fill in theapplication information, such as the enterprise scale, service information, andcontact information.

Step 7 Click OK.

The newly added user group appears in the user group list of the currententerprise project.

It takes about 30s for policies to take effect. You can log in again to view the policies.

----End

Other OperationsTo attach policies to a user group in an enterprise project, click Attach policy inthe same row as the user group. For details, see Step 6.





2.4.7.3 Removing User Groups from an Enterprise Project

You can remove a user group from an enterprise project if the enterprise'sbusiness has changed and the user group should not have the permissions to usethe enterprise project.

After a user group is removed, users in the user group cannot manage theenterprise project. If users in the user group want to manage the enterpriseproject, add the user group to the enterprise project again.

Removing One User Group



Step 2 Locate the enterprise project from which you want to remove a user group, andclick View User Group in the Operation column.


Step 3 Select the user group to be removed, and click Remove in the Operation column.

The Remove User Group dialog box is displayed.

Step 4 Click Yes.

The user group is removed from the current enterprise project.

----End

Removing Multiple User Groups



Step 2 Locate the enterprise project from which you want to remove user groups, andclick View User Group in the Operation column.


Step 3 Select the user groups to be removed, and click Remove next to Add User Group.

The Remove User Group dialog box is displayed.

Step 4 Click Yes.

The selected user groups are removed from the current enterprise project.

----End

2.4.8 Managing Financial Information of Enterprise Projects



2.4.8.1 Managing Enterprise Project Groups

2.4.8.1.1 Creating an Enterprise Project Group

An enterprise project group is a collection of multiple enterprise projects.Customers who have enabled the enterprise project function can add the sametype of enterprise projects under their accounts to the same group, and managethe overall financial information of the group.

Prerequisites

You have enabled the enterprise project function.

Procedure

Step 1 Go to the Overview page of Billing Center.

Step 2 In the upper right corner, click Enterprise Project Financial Information.

The Enterprise Project Accounting Information page is displayed.

Step 3 On the upper part of the page, click Enterprise Project Group Management.

The Enterprise Project Group Management page is displayed.

Step 4 Click Create Project Group.

The Create Project Group dialog box is displayed.

Step 5 Set Name and Description.

Step 6 Click Next.

Step 7 Select the enterprise projects you want to add to the group.



https://account.huaweicloud.com/en-us/usercenter/#/userindex/allview

● Next to Available Projects, enter an enterprise project name and click . Theenterprise project will be displayed on the list.

● Each enterprise project can belong to only one enterprise project group. Before movingan enterprise project to another group, remove the enterprise project from the originalgroup first.

● The spend summary of an enterprise project group is refreshed based on the latestmember enterprise projects. If an enterprise project leaves a group, the spend summary(including historical spend) of the removed enterprise project will no longer be countedin that group.

Step 8 Click OK.

----End

Other Operations● On the Enterprise Project Group Management page, select an enterprise

project group and choose More > Modify Group Name in the Operationcolumn. Then you can enter a new name or description for the selectedgroup.

● On the Enterprise Project Group Management page, select an enterpriseproject group and choose More > Manage Project List in the Operationcolumn. Then you can manage the member enterprise projects of the selectedgroup.

● On the Enterprise Project Group Management page, select an enterpriseproject group and choose More > Dismiss in the Operation column. Thenyou can dismiss the selected group.

After an enterprise project group is dismissed, its overall financial information will nolonger be displayed for you. However, you can still view the financial information ofeach individual member enterprise project.

2.4.8.1.2 Viewing Spend Information of an Enterprise Project Group

You can view the monthly spend amounts and spend description of the last 12months.

PrerequisitesYou have enabled the enterprise project function.

Procedure

Step 1 Go to the Overview page of the Billing Center.



Step 3 On the upper part of the page, click Enterprise Project Group Management.

The Enterprise Project Group Management page is displayed.



https://account.huaweicloud.com/en-us/usercenter/#/userindex/allview

Step 4 Select an enterprise project group and click View Spend Analysis in theOperation column.

The Spend Stat page displays spend details of the chosen enterprise projectgroup.

Step 5 View the monthly spend statistics for the last 12 months, including the spendamounts and spend breakdown.

On the Spend Stat page, click Export to export the monthly statistics.

----End

2.4.8.2 Accessing the Enterprise Project Accounting Information PageCustomers who have enabled the enterprise project function can use two methodsto access the Enterprise Project Accounting Information page and then performrenewal, order, financial information, unsubscription and change, and quotamanagement.

Accessing from the Project Management Console

Step 1 Go to the Enterprise Project Management page.

Step 2 Locate an enterprise project, and click View Expenditures in the Operationcolumn.

The Dashboard page is displayed.

Step 3 In the navigation pane on the left, click Renewals, Orders, Bills, Unsubscriptionsand Changes, or Quota Management to perform the related accountingmanagement operations.

----End

Accessing from the Billing Center




Step 3 Locate an enterprise project, and click Dashboard in the Operation column.

The Dashboard page of the enterprise project is displayed.

Step 4 In the navigation pane on the left, click Renewals, Orders, Bills, Unsubscriptionsand Changes, or Quota Management to perform the related accountingmanagement operations.

To view the spend details, analyze costs, or perform quota management for an enterpriseproject, click Spendings, Cost Analysis, or Set Quota in the Operation column on theEnterprise Project Accounting Information page.

----End



https://console.huaweicloud.com/en-us/eps/?region=cn-north-1#/eps/manager/projects

https://account.huaweicloud.com/usercenter/?locale=en-us#/userindex/allview

2.4.8.3 Renewing the Resources of an Enterprise Project

Users who have enabled the enterprise project function can view the resources ofan enterprise project, and renew the resources when they are about to expire.

Prerequisites


Procedure

Step 1 Go to the Renewals page of the enterprise project.

For details, see Accessing the Enterprise Project Accounting Information Page.

Step 2 Renew the selected resources.● For manual renewal, see Manually Renewing a Resource.● For automatic renewal, see Automatically Renewing a Resource.

----End

2.4.8.4 Managing the Orders of an Enterprise Project

Customers who have enabled the enterprise project function can pay orders,cancel orders, export orders, and view order details by enterprise project.

Prerequisites


Procedure

Step 1 Go to the Orders page of the enterprise project.


Step 2 Select an order to pay for it, cancel it, export it, or view its details.● To pay an order, see Paying Orders.● To cancel an order, see Canceling Orders.● To export an order, see Exporting Orders.● To view the details of an order, see Viewing Order Details .

----End

2.4.8.5 Managing the Bills of an Enterprise Project









https://support.huaweicloud.com/en-us/usermanual-billing/order_topic_1000001.html


2.4.8.5.1 Viewing and Exporting the Expenditure Summary of an Enterprise Project

Customers who have enabled the enterprise project function can view theexpenditure summary of each enterprise project.


Viewing the Expenditure Summary of an Enterprise Project

Step 1 Go to the Dashboard page of the enterprise project.

For details on how to go to the Dashboard page, see Accessing the Enterprise ProjectAccounting Information Page.

Step 2 View the monthly expenditure statistics for the last 12 months, including theexpenditure amounts and description.

----End

Exporting the Monthly Expenditure Bill of a Single Enterprise Project

Step 1 Go to the Enterprise Project Management page.

Step 2 Locate an enterprise project whose monthly expenditure bill you want to exportand click View Expenditures in the Operation column.

The Dashboard page of the enterprise project is displayed.

Step 3 Click the drop-down list and select a month.

Step 4 Click Export to export the monthly expenditure bill of the enterprise project.

----End

Exporting Monthly Expenditure Bills of Multiple Enterprise Projects


Step 2 In the upper right corner, click Enterprise Project Accounting Information.


Step 3 Select a month from the drop-down list above the enterprise project accountinginformation list.

Step 4 Click the check boxes of all enterprise projects whose expenditure bills you want toexport, and click Export.

----End

Downloading Monthly Expenditure Bills of Multiple Enterprise ProjectsOn the Enterprise Project Accounting Information page, choose Export Historyin the left navigation pane, select the desired exported bills, and click Download.





https://console.huaweicloud.com/eps/?region=cn-north-1&locale=en-us#/projects

https://account.huaweicloud.com/usercenter/?locale=en-us#/userindex/allview

2.4.8.5.2 Viewing the Expenditure Details of an Enterprise Project

Customers who have enabled the enterprise project function can view theexpenditure details of each enterprise project.

Prerequisites


Procedure

Step 1 Go to the Spending page of the enterprise project.


Step 2 Click a tab to view the bill details.

● By Resource: Displays bills by resource. A resource only has one bill record.

● By Transaction: Displays bills based on transaction time.

Step 3 Select an expenditure type and set search criteria to filter desired expenditurerecords.

Step 4 Click Details in the Operation column to view the expenditure details.

----End

2.4.8.5.3 Viewing the Cost Breakdown of an Enterprise Project

Customers who have enabled the enterprise project function can view financialanalysis of the enterprise project, including the cost trend for the past half year,the monthly cost breakdown, and the expenditure forecast.

Prerequisites


Procedure

Step 1 Go to the Cost Analysis page of the enterprise project.


Step 2 View the cost trend for the past half year and the monthly cost breakdown of theenterprise project.

● Choose to display the cost trend by costs or usage.





● Select a month to view the monthly cost breakdown.

Next to the selected month, click Export to export the monthly cost breakdowninformation.

----End

Other OperationsOn the Cost Analysis page, click Spend Forecast to view the maximum value,estimated value, and minimum value for the current and next months.

Only the customers who have expenditure records in the last three months can have aforecast for the current and next months.

2.4.8.5.4 Viewing the Bill Analysis of an Enterprise Project

Customers who have enabled the enterprise project function can view the productexpenditure trends and distribution of each enterprise project.


View the Product Cost Trend of an Enterprise Project

Step 1 Go to the Bills page of the enterprise project.


Step 2 Click the Expenditure by Date tab.

Step 3 The charts display the expenditure trends of the project based on the filter criteria.● Time: Displays the trends by time.




● Products: Displays the trends by products.

----End

Viewing the Expenditure Distribution of an Enterprise Project

Step 1 Go to the Bills page of the enterprise project.

Step 2 Click the Expenditure by Type tab.

Step 3 The charts display the expenditure trends based on the filter criteria.

----End



2.4.8.5.5 Exporting Records

After submitting an export request on the Spendings or Cost Analysis page, youcan download the exported records from the Export History page.

Prerequisites


Important Notes

The exported records will be automatically deleted three days after the exportrequest takes effect. Please download the exported files in time.

Procedure

Step 1 Go to the Export History page of the enterprise project.

● For details, see Accessing the Enterprise Project Accounting Information Page.

● You can download the export records on the Enterprise Project AccountingInformation > Export History page.

Step 2 Locate a record, and click Download in the Operation column.

The revenue and expenditure details are downloaded to a local directory.

----End

2.4.8.6 Managing the Resources of an Enterprise Project

2.4.8.6.1 Unsubscribing from the Resources of an Enterprise Project

Customers who have enabled the enterprise project function can unsubscribe fromresources of an enterprise project.

Prerequisites


Procedure

Step 1 Go to the Unsubscriptions page of the enterprise project.


Step 2 Select a resource and unsubscribe from it.● For details about how to unsubscribe from a resource that is successfully

created, see Unsubscribing from Resources.




https://account.huaweicloud.com/usercenter/#/enterpriseFinaceIndex/exportRecords



● For details about how to unsubscribe from a resource that fails to be createdor changed, see Unsubscribing from a Resource That Fails to Be Created orChanged.

----End

2.4.8.6.2 Changing the Billing Mode of an Enterprise Project

Customers who have enabled the enterprise project function can change thebilling mode of an enterprise project, from pay-per-use to yearly/monthly or fromyearly/monthly or pay-per-use.

Prerequisites


From Pay-per-Use to Yearly/Monthly

Step 1 Go to Subscriptions page of the enterprise project.


Step 2 Select a resource and change its billing mode. For details, see From Pay-per-Useto Yearly/Monthly.

----End

From Yearly/Monthly to Pay-per-Use

Step 1 Go to the Renewals page of the enterprise project.

Step 2 Select a resource and change its billing mode. For details, see From Yearly/Monthly to Pay-per-Use .

----End

2.4.8.7 Setting the Fund Quota of an Enterprise Project

A customer who has enabled the enterprise project can set a capital quota for theenterprise project to control the reasonable use of funds for the enterprise project.When the fund quota of an enterprise project is insufficient, you can configure torestrict subsequent subscription of yearly/monthly cloud resources andprovisioning of pay-per-use cloud resources. However, there is no restriction onexisting cloud resources. You can continue to use pay-per-use cloud resources,renew yearly/monthly cloud resources both manually and automatically, change toyearly/monthly subscription, modify resource configuration, and perform otheroperations on existing cloud resources.

On the Enterprise Project Accounting Information page, users who haveenabled the enterprise project function can view the fund quota of each enterpriseproject, enable or disable the quota setting, and enable or disable quota balancealerting.










Fund quotas set for enterprise projects are used only to ensure that funds are appropriatelyused for enterprise projects. When a user of an enterprise project purchases cloud resources,the fee is deducted from the user's HUAWEI CLOUD account, and the fund quota of theenterprise project is also deducted.


Setting a Quota

Step 1 Go to the Quota Management page of the enterprise project.

● For details, see Accessing the Enterprise Project Accounting Information Page.● A fund quota cannot be set for the default enterprise project.

Step 2 If the quota setting is disabled, enable it. If it is already enabled, go to 3.

After the fund quota setting is disabled for an enterprise project, the expenditures of thisenterprise project will no longer be controlled by the quota.

Step 3 Set the quota balance to deal with the circumstance in which the fee needed topurchase a yearly/monthly subscribed or pay-per-use resource is greater than thequota balance.

Insufficient quota balance indicates that when you subscribe to yearly/monthlycloud resources or pay-per-use cloud resources, the required fee is higher thanyour quota balance. In this case, the following two options are available:● Allow purchase of yearly/monthly cloud resources and provisioning of

pay-per-use cloud resources: When the quota balance of an enterpriseproject is insufficient, the purchase of yearly/monthly cloud resources andprovisioning of pay-per-use cloud resources are not restricted.

● Prohibit purchase of yearly/monthly cloud resources and provisioning ofpay-per-use cloud resources: When the quota balance of an enterpriseproject is insufficient, the purchase of yearly/monthly cloud resources andprovisioning of pay-per-use cloud resources are prohibited.




Step 4 Click Sure.

A message is displayed indicating that the operation is successful.

● Click Change next to Current Quota Balance to modify the quota balance.

● Click Show next to Balance Change History to view historical quota change records.

----End

Enabling the Balance Alert

When the fund quota balance decreases below the threshold, the system sends atext message to notify the message receiver of the insufficiency.

Step 1 Go to the Quota Management page of the enterprise project.

Step 2 If the balance alert is disabled, enable it. If it is already enabled, go to 3.

After balance alert is disabled, HUAWEI CLOUD will no longer send text messages foralerting an insufficient balance.

Step 3 Set the balance alert threshold.● Click Modify next to Alert Threshold to modify the threshold value.● Click Change SMS Recipient next to SMS Notification to set the recipient

information.

----End

2.5 Application Management

2.5.1 OverviewThis section helps you quickly master the application management operations.



● Application Management: Users can invoke application managementtemplates to provision cloud resources and deploy service software. Users canmonitor application resources by creating monitoring tasks and monitor theapplication resource usage, alarms, and SAP system running status on the SAPmonitoring screen in real time.

● Template Management: Resource templates simplify cloud computingresource management and automate O&M. Based on the defined templatespecifications, users can compile a template file and define a collection ofcloud computing resources, dependencies between resources, and resourceconfigurations. Then users can use the orchestration engine to achieveautomatic creation and configuration of all resources in the template,simplifying O&M.Templates are classified as example templates and my templates. You canview and use example templates. You can also create and manage your owntemplates.

● O&M Management: By creating O&M tasks, users can expand, back up, andrecover enterprise project application resources, and implement disasterrecovery for these resources.

2.5.2 Applications

2.5.2.1 Viewing an Application

To view existing application information, perform the following steps:



Step 2 In the navigation pane, choose Application Management > Applications.

The application list is displayed in the lower part of the page.

Step 3 Select the region where the applications to be viewed are deployed.

The application list of the selected region is displayed at the bottom of the page.

Step 4 Filter applications.

In the upper right corner of the list, select an enterprise project or enter anapplication name to filter applications.

Step 5 Click an application name to go to the application details page.

You can view Resources, Parameters, and Events about the application on thedetails page.

----End

2.5.2.2 Creating an Application

By creating an application, you can invoke a template to provision cloud resourcesand deploy service software.



The creation of an application is free of charge, but related services are charged asrequired.





Step 3 Click Create Application in the upper left of the application list.

The Create Application page is displayed.

Step 4 Configure basic application information. Set the parameters based on Table 2-5.

Table 2-5 Basic application information


Enterprise ProjectName

Select an existing enterprise project from the drop-down list box or click Create Enterprise Project on theright.

Region Select a region to create the application. A maximum of100 applications can be created in each region.

Application Name You can set an application name as required. Theapplication name cannot be empty and must be 1 to 64characters long and start with a letter. Only digits,letters, hyphens (-), and underscores (_) are allowed.

ApplicationDescription

Optional. The description can contain a maximum of256 characters.

Source Type ● Example templates● My templates

Template Type ● SAP● Common

Select Template Select the template from the list. If there are manytemplates, you can enter the template name in thesearch box to search for the template.

Step 5 Click Next.

The Configure Parameters page is displayed. On this page, you can set templateparameters based on your requirements.

Step 6 Click Next.

The Confirm Specifications page is displayed. On this page, you can confirm thebasic information and template parameters.




After the application is created, you can view it in the application list.

----End

2.5.2.3 Modifying ApplicationsWhen the application information changes, you can modify its name, description,and application parameters.

An application can be modified only when it is successfully created, updated, ormanaged.





Step 3 Locate the application to be modified, and click Modify in the Operation column.

The Modify Application page is displayed.

Step 4 Modify the application name.

The application name cannot be empty and must be 1 to 64 characters long andstart with a letter. Only digits, letters, hyphens (-), and underscores (_) areallowed.

Step 5 (Optional) Enter an application description.

The description can contain a maximum of 256 characters.

Step 6 Modify application parameters.

The parameters that can be modified are displayed. Change parameter values inthe gray area in the lower part of the page.

Parameters invoked by resources of this application are not displayed and cannot bemodified. To check whether a parameter is invoked by the resources, choose ApplicationManagement > Template Management, click the source template of the application onthe Example Templates or My Templates tab pages, and view Template Content on thedisplayed template details page. The parameters listed in the resources section are invokedby resources.

Step 7 Click Next.

The application modification details page is displayed.

Step 8 Confirm the application details and click Submit.

Then you can access the application details page to check whether the applicationinformation has been modified.

----End



2.5.2.4 Deleting an ApplicationYou can delete an application that is no longer used.





Step 3 Locate the application to be deleted, and click Delete in the Operation column.

The Delete Application dialog box is displayed.

Step 4 Click Yes.

After the application is deleted, it is not displayed in the application list.

----End

2.5.2.5 Creating a Monitoring Panel and Viewing Monitoring DataBy creating a monitoring panel for an application, you can view metrics you areinterested and monitoring data of resources in the application in the monitoringpanel.





Step 3 Click Create Monitoring Panel in the Operation column on the right of theapplication list.

The Create Monitoring Panel dialog box is displayed.

Step 4 Enter the name of the monitoring panel.

The monitoring panel name cannot be empty. It can contain only digits, letters,hyphens (-), and underscores (_), and must start with a letter. It can contain 1 to64 characters.

Step 5 Click OK.

After a monitoring panel is created, Create Monitoring Panel in the Operationcolumn switches to View Monitoring.

Step 6 Click View Monitoring.

By default, the created monitoring panel is displayed on the Monitoring Panelspage of the Cloud Eye console.

On the monitoring panel, five graphs of CPU usage, disk read IOPS, disk writeIOPS, disk read bandwidth, and disk write bandwidth are displayed by default.



You can add a graph on this page to monitor metrics of the resources that you areinterested. For details about how to add a monitoring graph, see Adding a Graph.

----End

2.5.2.6 Application ManagementIf you want to use applications to manage resources that are not created inapplications, you can use the management function to manage them.

Only ECSs in the running or stopped state can be managed currently. Applicationscreated by using templates cannot be managed.

Application Management





Step 3 Click Manage Resource above the application list.

The Application Management page is displayed.

Step 4 Select an ECS.

1. In the Enterprise Project Name drop-down list, click the drop-down arrow,and select the enterprise project to which the resource to be managedbelongs.

2. In the Region drop-down list, click the drop-down arrow, and select theregion to which the resource to be managed belongs.

3. Select the resource to be managed in the ECS list.

4. Click to add the resource to the Selected ECSs List area.5. Click Next.

Step 5 Configure the parameters.

1. Select an application.– Click the drop-down arrow, and select an application.– Click Create Application, and enter information such as the name to

create an application.2. (Optional) Configure parameters.

Users can add parameters to identify applications.You can add a parameter group, specify the name and type of each parameterin the group, and add parameter content. For the Type parameter, selecteither Text or Numeral as required.A maximum of 10 parameter groups and 100 parameters can be created. Theparameter group names and parameter names must be unique.

3. Click Next.



https://support.huaweicloud.com/en-us/usermanual-ces/en-us_topic_0084572190.html

Step 6 Confirm the specifications of the resource to be managed, and click Submit.

The application has been managed. You can view the application status in theapplication list.

----End

Follow-Up ProcedureAfter the application is managed, you can perform the following operations on theapplication.

● By creating a monitoring panel, you can monitor the metrics of the resourcesmanaged by the application. For details about how to create a monitoringpanel, see 2.5.2.5 Creating a Monitoring Panel and Viewing MonitoringData.

● O&M management allows you to expand, back up, and recover managedresources of an application. It also allows you to implement disaster recoveryfor those resources. For details, see 2.5.4.2 EVS Disk Expansion to 2.5.4.4Application Disaster Recovery.

2.5.2.7 SAP Full Screen MonitoringThe SAP full screen monitoring provides functions such as SAP system monitoring,alarm statistics, application overview, CPU usage, memory usage, disk I/O, andnetwork traffic overview. The SAP full screen monitoring helps you betterunderstand the application resource usage, alarms, and SAP system running statusin real time.

This section describes how to perform the following operations:

● Installing Configuration Plug-ins● Viewing the SAP Full Screen Monitoring Page● Adding an Application Monitoring Task● Modifying an Application Monitoring Task● Deleting an Application Monitoring Task● Viewing a Monitoring Graph● Modifying a Monitoring Graph● Deleting a Monitoring Graph● Adding a Monitoring Graph

Installing Configuration Plug-insTo view the SAP full screen monitoring, you need to install the relevantconfiguration plug-ins. For details about the SAP scenarios and the plug-inconfigurations, see:

● SAP HANA (Single-Node Deployment Without HA Required)● SAP HANA (Single-Node Deployment With HA Required)● SAP S/4HANA (Single-Node Deployment Without HA Required)● SAP S/4HANA (Single-Node Deployment With HA Required)



https://support.huaweicloud.com/en-us/bestpractice-sap/sap_08_0036.html




● SAP S/4HANA (Distributed Deployment with HA Required)● SAP S/4HANA (Distributed Deployment Without HA Required)

Viewing the SAP Full Screen Monitoring Page

The SAP full screen monitoring helps you better understand the applicationresource usage, alarms, and SAP system running status in real time.

The system will be disconnected automatically if no operation is performed within30 minutes as an administrator account. You are advised to use the dedicatedaccount for full screen monitoring. For details about how to add a dedicatedaccount, see How Do I Add a Dedicated Account for the SAP Full ScreenMonitoring?

Figure 2-11 SAP full screen monitoring

Alarm Statistics: Displays the number of alarms at different ranks. The collectionof alarm information depends on Cloud Eye. After you install and configure theplug-ins required by the SAP full screen monitoring, the system reports thecollected monitoring data on the Custom Monitoring page of the Cloud Eyeconsole. You only need to create alarm rules in Cloud Eye console to view alarmstatistics on the SAP Full Screen Monitoring page. For details about customizingmonitoring and creating alarm rules, see Using Custom Monitoring.

The Alarm Statistics function takes effect only on the applications that meet the followingconditions:

● The application has been added to the application monitoring. For details, see Addingan Application Monitoring Task.

● Alarm rules have been created for the application.

ABAP Dumps: Displays the top three applications with the largest number ofdump tasks in the last hour.

Background Jobs: Displays the top three application SIDs with the largest numberof background jobs in the last hour.







https://support.huaweicloud.com/en-us/qs-ces/en-us_topic_0161841863.html

Lock Entries Usage: Displays the top three applications with the largest numberof lock entries usage.

Overview Status: Displays custom application monitoring data. You can add,modify, and delete application monitoring data as required.

Resource Usage: Displays the top three resource usage metrics in the last threeminutes. The available metrics are Extended Memory Usage, Heap MemoryUsage, Dialog Work Processes Usage, Background Work Processes Usage,Spool Work Processes Usage, Update 1 Work Processes Usage, Update 2 WorkProcesses Usage, CPU Usage, Memory Usage, Disk I/O, Network, and FileSystem Usage.

To view the SAP full screen monitoring page, perform the following steps.





Step 3 Click SAP Full Screen Monitoring above the application list.

The Monitoring Management page is displayed.

Step 4 Click Full Screen Monitoring.

The SAP Full Screen Monitoring page is displayed.

----End

Adding an Application Monitoring TaskAfter application monitoring is added, you can monitor the metrics of resources inthe application in real time.

If you add application monitoring for the first time, the system displays themonitoring graphs of the following metrics by default: ABAP Dumps, BackgroundJobs, Lock Entries Usage, CPU Usage, Memory Usage, Disk I/O, Network, and FileSystem Usage. You can modify the graph to display other metrics that youconcern.






The Monitoring Management page is displayed. You can change the metrics tobe displayed in the SAP Full Screen Monitoring area.

Step 4 Click in the Overview Status area.



The Add Application Monitoring dialog box is displayed.

A maximum of 18 application monitoring data records can be added currently.

Step 5 Enter the monitoring information about the application.● Application: Select an existing application.● Database: Select the database to which the application is connected.● Application SID: Enter the SID of the SAP application system.● Database SID: Enter the SID of the SAP database.

The SID information cannot be empty. The value must be a string of three charactersconsisting of uppercase letters and digits, and must start with a letter.

Step 6 Click OK.

----End

Modifying an Application Monitoring TaskTo modify the original application monitoring information, perform the followingsteps:







Step 4 Locate the application monitoring data to be modified in the Overview Status

panel, and click .

The Modify Application Monitoring dialog box is displayed. You can modify theapplication, database, application SID, and database SID.

Step 5 Click OK.

----End

Deleting an Application Monitoring TaskTo stop monitoring an application, perform the following steps:









Step 4 Locate the application monitoring data to be removed in the Overview Status

panel, and click .

The Delete Application Monitoring dialog box is displayed.

Step 5 Click OK.

----End

Viewing a Monitoring Graph

After setting the application monitoring, you can view the data of each metric ofthe application resource in the monitoring graph.







Step 4 Locate the monitoring graph to be viewed in the SAP Full Screen Monitoring

area, and click .

The system displays the expanded monitoring graph and the ranking of all themetrics data.

----End

Modifying a Monitoring Graph

To change the original metrics in a graph to other metrics, perform the followingsteps:









Step 4 Locate the monitoring graph to be modified in the SAP Full Screen Monitoring

area, and click .

The Modify Application Monitoring dialog box is displayed.

Step 5 Select the metrics to be displayed from the drop-down list.

Step 6 Click OK.

If the new metrics are displayed in the graph, the modification is successful.

----End

Deleting a Monitoring GraphTo stop monitoring a metric, perform the following steps:







Step 4 Locate the application whose monitoring metrics are to be removed in the SAP

Full Screen Monitoring area, and click .

The Delete Application Monitoring dialog box is displayed.

Step 5 Click OK.

If the graph is not displayed on SAP Full Screen Monitoring, it is deletedsuccessfully.

----End

Adding a Monitoring GraphYou can add a monitoring graph to monitor the required metrics in the SAP FullScreen Monitoring area.

You can add a graph only when there is a blank graph on the page.

To add a monitoring graph, perform the following operations:









Step 4 Click in the left or right pane in the SAP Full Screen Monitoring area.

The Add Monitoring Graph dialog box is displayed.

Step 5 Select the metrics to be displayed from the drop-down list.

Step 6 Click OK.

If the graph is displayed on SAP Full Screen Monitoring, it is added successfully.

----End

2.5.3 Template Management

2.5.3.1 Example Templates

An example template is the heat template for service resource provisioning andsoftware deployment. You can select an example template to create an applicationor modify it to create your own template.

Viewing an Example Template

The example template details page contains the type, description, resource view,and content of the example template. To view the sample template information,perform the following steps.



Step 2 In the navigation pane, choose Application Management > TemplateManagement.

The Example Templates tab page and the example template list are displayed bydefault.

Step 3 Click the name of the example template to be viewed. The example templatedetails page is displayed.

You can view the details and content of the example template on this page. Youcan also click Create Application in the upper right corner to create anapplication, or click Download Template to save the template as your owntemplate.



For details about how to create an application, see 2.5.2.2 Creating anApplication.

----End

Creating an ApplicationYou can create an application by using the example templates provided by thesystem.





Step 3 Locate a desired template, and click Create Application in the Operation column.

Create an application based on your requirements. For details, see 2.5.2.2Creating an Application.

----End

Modifying a Template to Create My TemplateYou can modify the example templates provided by the system to create your owntemplates.





Step 3 Locate a desired template, and click Modify as My Template in the Operationcolumn.

The Modify as My Template page is displayed. Set the parameters by referring tothe descriptions in Table 2-6.



Table 2-6 Template parameter configuration


Region Select a region where the template to be created will beused.A maximum of 100 templates can be created for eachregion.

Template Name Set a template name as required. The template namecannot be empty, can contain only digits, letters, hyphens(-), and underscores (_), and must start with a letter.

Template Type ● SAP● Common

TemplateDescription

Optional. The description can contain a maximum of 256characters.

Parameters in thetemplate

You can configure the template parameters based on yourrequirements in the gray area in the lower part of thepage.

Step 4 Click Create Now.

After the template is created, you can view it in the template list on the MyTemplates tab page.

----End

2.5.3.2 My Templates

My Templates lists custom resource template. You can view, create, replicate,update, and delete templates and create applications using the templates on theMy Templates tab page.

Viewing Templates

The template details page contains the template type, status, source type, region,creation time, and content. You can perform the following steps to view thetemplate details.





Step 3 Click the My Templates tab.



Step 4 Select a region to view templates.

The template list in the selected region is displayed in the lower part of the page.

Step 5 Search for a template.

Enter the template name in the upper right corner of the list to search for thetemplate to be viewed.

Step 6 Click the template name. The template details page is displayed.

You can view the template details and template content on the details page. Youcan also click Create Application in the upper right corner to create anapplication using the template. For details about how to create an application, see2.5.2.2 Creating an Application.

----End

Creating a Template

The system provides two template creation methods: Create directly or createfrom an application backup. You can select the desirable method as required.






Step 4 Click Create Template above the template list.

The Create Template page is displayed. Set the parameters based on thedescriptions in Table 2-7.

Table 2-7 Template parameter configuration


Region Select a region to create the template. A maximum of100 templates can be created for each region.

Template Name You can set a template name as required. Thetemplate name cannot be empty, can contain onlydigits, letters, hyphens (-), and underscores (_), andmust start with a letter.

Template Description Optional. The description can contain a maximum of256 characters.




SourceType

Createdirectly

TemplateType

Select SAP or Common.Next, you can select Enter Template Code, ExampleTemplates, or My Templates.

SelectTemplate

When Template Type is set to Example Templates orMy Templates, you need to select a template.

TemplateContent

The template content is displayed in the text box andcan be modified.

Createfrombackup

TemplateData

1. Filter application backups using the followingparameters:– Enterprise Project– Application– Application Backup

2. Configure the ECS.For details about parameter settings, see theElastic Cloud Server Getting Started.

Set customized parameters, which are optional.You can add a parameter group, specify the name andtype of each parameter in the group, and addparameter content. For the Type parameter, selecteither Text or Numeral as required.A maximum of 10 parameter groups and 100parameters can be created. The parameter groupnames and parameter names must be unique.

Reuse the original template structure. After the application backup is selected,the function is selected by default. When the in-app resources have not changed,you can use parameters in the original template that are used to create thisapplication as default values to simplify parameter input.

Configure now: If you select Configure now for a parameter when configuring anECS, the specified parameter value is used in the created template. When thetemplate is used to create an application later, the parameter will inherit thisvalue and will not be displayed on the configuration page.

Shared configuration: If the selected application is deployed on two ECSs, theECSs can share settings. To share settings, select Shared configuration for theapplicable ECS parameters. The parameters of two ECSs will use the same settingsin the created template by default.

Customized Parameters: You can add parameters to identify applications.

For example, the following customized parameters can be added:



https://support.huaweicloud.com/en-us/qs-ecs/en-us_topic_0021831611.html

● Parameter Group: BasisInfo● Parameter Name: Database● Type: Text● Content: SAP HANA 2.0

Step 5 Click Create Now.

After the template is created, you can view it in the template list on the MyTemplates tab page.

----End

Creating an ApplicationYou can create applications using templates under My Templates and are in theCreation succeeded or Update succeeded state.






Step 4 Locate a desired template, and click Create Application in the Operation column.

Create an application based on your requirements. For details, see 2.5.2.2Creating an Application.

----End

Replicating a TemplateYou can create templates by replicating the templates in the Creation succeededor Update succeeded state. In the future, you can customize contents of thetemplates replicated.






Step 4 Locate the template to be replicated, and click Replicate in the Operationcolumn.



The Replicate Template dialog box is displayed.

Step 5 Enter the name and description.

The name must be unique and cannot be empty. It can contain only digits, letters,hyphens (-), and underscores (_), and must start with a letter.

The description is optional. The description can contain a maximum of 256characters.

Step 6 Click Yes.

The template replicated is displayed in the template list on the My Templates tabpage.

----End

Updating a TemplateYou can modify templates by updating the templates in the Creation succeededor Update succeeded state.






Step 4 Locate the template to be updated, click More in the Operation column, andchoose Update.

Update Template Description or Template Content based on your requirements.

Step 5 Click OK.

The target template is updated, and you can view the updated templateinformation on the template details page.

----End

Deleting a TemplateWhen some templates are no longer used, you can delete them.








Step 4 Locate the template to be deleted, and click More > Delete in the Operationcolumn.

The Delete Template dialog box is displayed.

Step 5 Click OK.

The deleted template is not displayed in the template list.

----End

2.5.4 O&M Management

2.5.4.1 Viewing O&M Tasks



Step 2 In the navigation pane, choose Application Management > O&M Management.

The Tasks tab page and task list are displayed by default.

Step 3 Filter tasks.

You can select the enterprise project that tasks belong to, task type, start time,and end time of the task in the upper right corner of the list. You can also enterthe task name to filter tasks.

----End

2.5.4.2 EVS Disk ExpansionYou can expand EVS disk capacity if the space of a disk in an application becomesinsufficient.



NO TICE

● Capacity expansion is a risky operation. Exercise caution when performing thisoperation.

● To prevent data loss, the disk capacity can only be expanded, but cannot bereduced.

● If the expanded disk has been attached, the capacity expansion takes effectafter you restart the server attached with this disk. Some OSs do not need arestart. For details, see Supported OSs.

● When the MBR partition style is used, the maximum disk capacity supported is2048 GB, and the rest exceeding 2048 GB cannot be allocated and used. If thedisk has already been put to use, check the disk partition style beforeexpanding its capacity.

● After the disk has been expanded, you need to log in to the server andmanually modify the file system configuration to use the additional capacity.For details, see Introduction to Expansion Scenarios.





Step 3 Click Create Task in the upper left of the task list.

The Create Task page is displayed. Configure task information based on Table2-8.

Table 2-8 Task information configuration


Task Name Specifies the name of the task. The name cannot be emptyand must be 1 to 64 characters long. Only letters, digits,underscores (_), and hyphens (-) are allowed.

Task Type Choose EVS disk expansion.

Select Disk You need to select disks based on the followinginformation:● Enterprise Project● Application● Server

New Capacity Configure the disk capacity to be added.

Step 4 Click Create.

The page for confirming the task details is displayed.



https://support.huaweicloud.com/en-us/usermanual-evs/evs_01_0007.html

https://support.huaweicloud.com/en-us/usermanual-evs/evs_01_0006.html


After the capacity expansion task is created, you can view the task in the task list.If the task is in the Succeeded state, the EVS disk expansion is successful.

----End

2.5.4.3 Application Backup and RestorationYou can use the application backup function to create backup for ECSs in anenterprise project. If an application is faulty, you can use backup data to restorethe service data of the ECSs. This ensures security and correctness of user data andensures service security.

This section describes how to perform the following operations:

● Application backup● Application restoration● Viewing application backup● Deleting a backup

Application Backup









Task Name Specifies the name of the task. The name cannot be empty.It can contain only letters, digits, underscores (_), andhyphens (-). It can contain 1 to 64 characters.

Task Type Choose Application backup.

Select Application Filter applications based on enterprise projects.


The Create Backup page is displayed.

Step 5 Set the backup.

This function invokes Cloud Server Backup Service (CSBS). For details aboutbackup settings, see Creating a CSBS Backup.



https://support.huaweicloud.com/en-us/qs-csbs/en-us_topic_0072046354.html

After the backup task is submitted, you can view the task status by going back tothe task list on the O&M Management page. If the status is Succeeded, theapplication is backed up successfully.

----End

Application RestorationYou can use either of the following methods to restore applications:

● Creating a task: Create an application restoration task.● Direct restoration: Click Restore in the Operation column of the backup list.

Creating a Task










Task Type Choose Application restoration.

Select CSBSBackup

Filter the backup to be recovered by selecting theenterprise project, application, server, or entering thebackup name.


The Restore Data dialog box is displayed.

Step 5 Click Yes.

After the backup is restored, the following message is displayed: Applicationrestoration task created successfully.

You can also view the task status by going back to the task list on the O&MManagement page. If the status is Succeeded, the application is successfullyrestored.

----End



Direct Restoration





Step 3 Click the Backups tab.

The backup list is displayed. You can filter backups by time, status, or enter abackup name in the upper right corner of the list.

Step 4 Locate the backup to be restored and click Restore in the Operation column.

The Application Restoration dialog box is displayed.

Only the backups in Available state can be restored.

Step 5 Enter the task name and confirm the enterprise project, application, server, andname of the backup.

The name cannot be empty. It can contain only letters, digits, hyphens (-), andunderscores (_).

Step 6 Click OK.

The Cloud Server Backup Service page is displayed, and the Restore Data dialogbox is displayed.

Step 7 Confirm the server information and click Yes.

The following information is displayed: Application restoration task createdsuccessfully.

You can also return to the O&M management task list to view the applicationstatus. If the status is Succeeded, the application is successfully restored.

----End

Viewing Application Backups






The backup list is displayed. You can view the status, application, enterpriseproject, and creation time of each backup.

----End



Deleting a Backup

If some backup data is no longer used, perform the following steps to delete it:

Only the backups in Available or Error state can be deleted.






The backup list is displayed. You can filter backups by time, status, or enter abackup name in the upper right corner of the list.

Step 4 Select the backup to be deleted and click Delete in the Operation column.

The Cloud Server Backup Service page is displayed.

Step 5 On the right of the backup to be deleted, choose More > Delete in the Operationcolumn.

The Delete Backup dialog box is displayed.

Step 6 Click Yes.

The backup is deleted.

Go back to the O&M Management page. When the backup is not displayed in thebackup list, the backup has been deleted.

----End

2.5.4.4 Application Disaster Recovery

You can create application disaster recovery tasks for ECSs in an application. Whenthe production site is faulty, you can use simple configurations to quickly recoverservices at the DR site.

Creating Application Disaster Recovery












Task Type Choose Application disaster recovery.

Select ECS Select the ECS based on enterprise project and application.

SelectingProtection Group

Select a protection group from the drop-down list or clickCreate Protection Group.For details about how to set parameters for creating aprotection group, see Create a Protection Group.


The Create Protected Instance page is displayed. For details, see Create aProtected Instance.

Go back to the task list on the O&M Management page. If the target task statusis Succeeded, the disaster recovery for the application is successful.

----End

Viewing Application Disaster Recovery Information





Step 3 Click the Disaster Recovery tab.

Information about the ECS for which the disaster recovery task is created isdisplayed, including the application, enterprise project, protection group,protection group status, protection instance, protection instance status, andcreation time.

----End



https://support.huaweicloud.com/qs-sdrs/zh-cn_topic_0108180805.html



User Guide - HUAWEI CLOUD...Real-Name Authentication Process). If the account has registered as a...

Documents

Transcript of User Guide - HUAWEI CLOUD...Real-Name Authentication Process). If the account has registered as a...