- Product Introduction
- Purchase Guide
- Operation Guide
- Console Overview
- Organization Settings
- Department Management
- Member Account Management
- Viewing Member List and Basic Information
- Removing Organization Member
- Adding Organization Member
- Canceling Member Invitation
- Binding Tags to Members and Departments
- Creating Member Login Permission
- Configuring Member Login Permission
- Authorizing Sub-Users to Log in to Member Accounts
- Configuring Message Subscription for Created Member
- Binding Security Information for Members
- Deleting Created Organization Member
- Enabling Member Deletion Permission
- Member Finance Management
- Member Access Management
- Service Control Policy
- Overview
- Enabling Service Control Policy
- Creating Custom Service Control Policy
- Viewing Service Control Policy Details
- Modifying Custom Service Control Policy
- Deleting Custom Service Control Policy
- Binding Custom Service Control Policy
- Unbinding Custom Service Control Policy
- Disabling Service Control Policy
- Service Control Policy
- Resource Management
- Member Audit
- Identity Center Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Organization Settings APIs
- Department and Member Management APIs
- ListOrganizationIdentity
- Unified Member Login APIs
- Organization Service Management APIs
- Identity Center Management APIs
- Identity Center User Management APIs
- Identity Center User Group Management APIs
- Identity Center Management SCIM Synchronization APIs
- Identity Center Single Sign-On Management APIs
- Identity Center Permission Configuration Management APIs
- ListRoleConfigurationProvisionings
- CreateRoleConfiguration
- ListRoleConfigurations
- ListPermissionPoliciesInRoleConfiguration
- GetRoleConfiguration
- RemovePermissionPolicyFromRoleConfiguration
- UpdateCustomPolicyForRoleConfiguration
- UpdateRoleConfiguration
- AddPermissionPolicyToRoleConfiguration
- DeleteRoleConfiguration
- Identity Center Multi-Account Authorization Management APIs
- Identity Center Sub-User Synchronization Management APIs
- Data Types
- Error Codes
- TCO API 2018-12-25
- History
- Introduction
- API Category
- Making API Requests
- Read APIs
- Write APIs
- UpdateOrganizationNode
- UpdateOrganizationMember
- SendOrganizationInvitation
- QuitOrganization
- MoveOrganizationMembersToNode
- DenyOrganizationInvitation
- DeleteOrganizationNodes
- DeleteOrganizationMemberFromNode
- DeleteOrganization
- CreateOrganization
- CancelOrganizationInvitation
- AddOrganizationNode
- AcceptOrganizationInvitation
- DeleteOrganizationMembers
- Data Types
- Error Codes
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Operation Guide
- Console Overview
- Organization Settings
- Department Management
- Member Account Management
- Viewing Member List and Basic Information
- Removing Organization Member
- Adding Organization Member
- Canceling Member Invitation
- Binding Tags to Members and Departments
- Creating Member Login Permission
- Configuring Member Login Permission
- Authorizing Sub-Users to Log in to Member Accounts
- Configuring Message Subscription for Created Member
- Binding Security Information for Members
- Deleting Created Organization Member
- Enabling Member Deletion Permission
- Member Finance Management
- Member Access Management
- Service Control Policy
- Overview
- Enabling Service Control Policy
- Creating Custom Service Control Policy
- Viewing Service Control Policy Details
- Modifying Custom Service Control Policy
- Deleting Custom Service Control Policy
- Binding Custom Service Control Policy
- Unbinding Custom Service Control Policy
- Disabling Service Control Policy
- Service Control Policy
- Resource Management
- Member Audit
- Identity Center Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Organization Settings APIs
- Department and Member Management APIs
- ListOrganizationIdentity
- Unified Member Login APIs
- Organization Service Management APIs
- Identity Center Management APIs
- Identity Center User Management APIs
- Identity Center User Group Management APIs
- Identity Center Management SCIM Synchronization APIs
- Identity Center Single Sign-On Management APIs
- Identity Center Permission Configuration Management APIs
- ListRoleConfigurationProvisionings
- CreateRoleConfiguration
- ListRoleConfigurations
- ListPermissionPoliciesInRoleConfiguration
- GetRoleConfiguration
- RemovePermissionPolicyFromRoleConfiguration
- UpdateCustomPolicyForRoleConfiguration
- UpdateRoleConfiguration
- AddPermissionPolicyToRoleConfiguration
- DeleteRoleConfiguration
- Identity Center Multi-Account Authorization Management APIs
- Identity Center Sub-User Synchronization Management APIs
- Data Types
- Error Codes
- TCO API 2018-12-25
- History
- Introduction
- API Category
- Making API Requests
- Read APIs
- Write APIs
- UpdateOrganizationNode
- UpdateOrganizationMember
- SendOrganizationInvitation
- QuitOrganization
- MoveOrganizationMembersToNode
- DenyOrganizationInvitation
- DeleteOrganizationNodes
- DeleteOrganizationMemberFromNode
- DeleteOrganization
- CreateOrganization
- CancelOrganizationInvitation
- AddOrganizationNode
- AcceptOrganizationInvitation
- DeleteOrganizationMembers
- Data Types
- Error Codes
- FAQs
- Glossary
Organization service management is the process of managing TCO-enabled Tencent Cloud services. TCO allows these Tencent Cloud services to access the department and member information in the TCO console. You can use the admin account or delegated admin account to manage the organization business in the console of each TCO-enabled product to simplify the unified management of your cloud business.
Directions
You can use the organization service management feature in the TCO console or through APIs. Below are the console directions.
1. In the TCO console, use the admin account to activate the TCO service. For directions, see Creating Organization.
2. In the TCO console, use the admin account to build the organization structure. You can create members or invite existing Tencent Cloud accounts to join the organization. For directions, see Creating Department and Adding Organization Member.
3. (Optional) In the TCO console, use the admin account to specify a member as the delegated admin of the organization service management. If you don't specify a delegated admin, you need to use the admin account to manage your business in the TCO-enabled product console. For more information, see Managing Delegated Admin Account.
Note：
This step only applies to the scenario where the delegated admin is supported.
4. In the TCO console, use the admin or delegated admin account to enable the multi-account management feature. Select members that need to be managed in a unified manner based on the organization structure and manage business for the selected members.
Enabling/Disabling Organization Service Management
1. You can enable or disable the organization service management feature in the consoles of the TCO-enabled products or through APIs.
2. You can go to the Organization service management page to view whether this feature is enabled. However, you cannot enable or disable this feature in the TCO console.
3. For some TCO-enabled products, when you perform certain operations, the status of the organization service management feature will be automatically updated to "Enabled".
4. The feature status will be automatically updated to "Disabled" when you perform operations such as disabling a feature. If you disable organization service management for a TCO-enabled product, the product cannot access the organization accounts or resources in TCO, and all TCO-related resources will be deleted from the product.
Organization service management and service-linked role
1. TCO has created a service-linked role TencentCloudServiceRoleForOrganizations for each member. This role allows TCO to create roles for a TCO-enabled product. This role can only be played by TCO.
2. The TCO-enabled product only creates service-linked roles for members who need to perform admin operations. This role defines the permissions with which the TCO-enabled product can perform certain operations. It can only be played by the corresponding TCO-enabled product.
3. The permission policy of the service-linked role is defined and used by the corresponding cloud service. You cannot modify or delete the permission policy, nor can you add or remove permissions for the service-linked role.
Yes
No
Was this page helpful?