ZStack Cloud Platform
Single Server, Free Trial for One Year
-
Documentation&Tools
Comprehensive product documentation and tools
-
Support & Services
Upholding the value of Customer First and the mission of Serving Customer, ZStack is dedicated to providing secure and stable services for customers.
-
Training & Certification
To educate ZStack partners and interested individuals about cloud computing and to cultivate cloud computing talent.
-
Content
ZStack provides innovative cloud infrastructure for ten major industries
VMware-to-ZStack Case Collection
The report provides three major
solutions and customer case studies for transitioning from VMware to ZStack.
ZStack Cloud 5.4.0>ZStack Cloud Product Manuals>ZStack Cloud Security Whitepaper>Product Security Analysis>Permission Management Security
Permission Management Security
Three-role Separation Model
The Cloud supports the three-role separation model for permission management, which decomposes the super administrator (admin) permissions and assigns them to the system administrator, security administrator, and security auditor. The system administrator manages resources of the Cloud, the security administrator handles permissions, and the security auditor oversees audits. The three roles are independent of and constrain each other.
The three-role separation model decomposes the super permissions of the super administrator and into the three distinct roles, effectively reducing the security risks caused by excessive super administrator permissions and further enhancing Cloud security.
Tenant Management Permissions
Tenant management primarily provides enterprise users with organizational structure management, project-based resource access control, ticket management, independent region management, and other functions. The tenant management feature is provided as a separate functional module.
Characteristics:
- Users are separate from roles. Roles, as a collection of permissions, can be flexibly bound to or unbound from tenant management users.
- Roles are categorized into system roles and custom roles. System roles are roles with predefined permission scopes provided by the Cloud by default. Custom roles are roles created by users as needed.
- The UI supports API-level permission control, flexibly adapting to the permission configuration requirements of various scenarios.
SM2 Certificate Login
The Cloud provides a certificate login feature based on the Shang Mi 2 (SM2) algorithm. After enable this feature, you must use a UKey for login authentication to ensure identity authenticity.
To use this feature, ensure that you have the module license of cryptography security compliance installed and certificate login enabled.
Certificate login can be enabled for the admin or tenants. To enable certificate login for tenants, ensure that the tenant management module license is installed on the Cloud.
Next Chapter: Glossary