How do I create IAM sub-users and configure their permissions?

Create sub-users under Identity & Security → IAM, grant them the minimum sufficient permissions, and avoid logging into the console with the root administrator account for daily work.