# Access Management

On region HAN02, you can use 4 types of accounts to access vStorage. Details of these 4 types include:

* **Root User Account:** Is the first account [created](https://register.vngcloud.vn/signup) to access GreenNode with full access to all resource services on GreenNode.
* **IAM User Account, Service Account:** Is an account created from the single Root user account with access rights depending on the access policy set from the Root user account.

<figure><img src="https://1985221522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7rE7M1L7GYcwQzNGd0aB%2Fuploads%2Fgit-blob-96685234cc67aab4deb5ec4b4f8b1477108342c7%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

* **S3 keys:** Is a pair of s3 keys with access key and secret key integrated by vStorage for compatibility with S3 client tools such as s3cmd, s3 SDK,...

<figure><img src="https://1985221522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7rE7M1L7GYcwQzNGd0aB%2Fuploads%2Fgit-blob-f8758dd577505019ec0a304d98bbc0d5c3d564b9%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

Refer to the table below to get an overview of how accounts work on vStorage:

<table data-full-width="true"><thead><tr><th width="194">Account type</th><th>Access Channel</th><th>Place of Origin</th><th>Default Permission</th><th>Working with project</th><th>Làm việc với bucket</th></tr></thead><tbody><tr><td>Root User Account</td><td>vStorage Portal</td><td>Initialize for the first time when using the service on GreenNode</td><td>Full rights on project and bucket</td><td>Yes</td><td>Yes</td></tr><tr><td>IAM User Account</td><td>vStorage Portal</td><td>IAM Portal</td><td>No access to any resources yet</td><td>Yes, permissions via IAM Policy</td><td>Yes, permissions via Bucket Policy</td></tr><tr><td>Service Account</td><td>vStorage API</td><td>IAM Portal</td><td>No access to any resources yet</td><td>Yes, permissions via IAM Policy</td><td>Yes, permissions via Bucket Policy</td></tr><tr><td>S3 keys</td><td>3rd party software</td><td>vStorage Portal</td><td>Depends on account creation</td><td>No</td><td>Yes, permissions depend on the type of user that created the S3 key</td></tr></tbody></table>