- Product Introduction
- Purchase Guide
- Operation Guide
- Console Overview
- Organization Settings
- Department Management
- Member Account Management
- Viewing Member List and Basic Information
- Removing Organization Member
- Adding Organization Member
- Canceling Member Invitation
- Binding Tags to Members and Departments
- Creating Member Login Permission
- Configuring Member Login Permission
- Authorizing Sub-Users to Log in to Member Accounts
- Configuring Message Subscription for Created Member
- Binding Security Information for Members
- Deleting Created Organization Member
- Enabling Member Deletion Permission
- Member Finance Management
- Member Access Management
- Service Control Policy
- Overview
- Enabling Service Control Policy
- Creating Custom Service Control Policy
- Viewing Service Control Policy Details
- Modifying Custom Service Control Policy
- Deleting Custom Service Control Policy
- Binding Custom Service Control Policy
- Unbinding Custom Service Control Policy
- Disabling Service Control Policy
- Service Control Policy
- Resource Management
- Member Audit
- Identity Center Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Organization Settings APIs
- Department and Member Management APIs
- ListOrganizationIdentity
- Unified Member Login APIs
- Organization Service Management APIs
- Resource Sharing APIs
- Identity Center Management APIs
- Identity Center User Management APIs
- Identity Center User Group Management APIs
- Identity Center Management SCIM Synchronization APIs
- Identity Center Single Sign-On Management APIs
- Identity Center Permission Configuration Management APIs
- ListRoleConfigurationProvisionings
- CreateRoleConfiguration
- ListRoleConfigurations
- ListPermissionPoliciesInRoleConfiguration
- GetRoleConfiguration
- RemovePermissionPolicyFromRoleConfiguration
- UpdateCustomPolicyForRoleConfiguration
- UpdateRoleConfiguration
- AddPermissionPolicyToRoleConfiguration
- DeleteRoleConfiguration
- Identity Center Multi-Account Authorization Management APIs
- Identity Center Sub-User Synchronization Management APIs
- Data Types
- Error Codes
- TCO API 2018-12-25
- History
- Introduction
- API Category
- Making API Requests
- Read APIs
- Write APIs
- UpdateOrganizationNode
- UpdateOrganizationMember
- SendOrganizationInvitation
- QuitOrganization
- MoveOrganizationMembersToNode
- DenyOrganizationInvitation
- DeleteOrganizationNodes
- DeleteOrganizationMemberFromNode
- DeleteOrganization
- CreateOrganization
- CancelOrganizationInvitation
- AddOrganizationNode
- AcceptOrganizationInvitation
- DeleteOrganizationMembers
- Data Types
- Error Codes
- Related Agreement
- FAQs
- Glossary
- Product Introduction
- Purchase Guide
- Operation Guide
- Console Overview
- Organization Settings
- Department Management
- Member Account Management
- Viewing Member List and Basic Information
- Removing Organization Member
- Adding Organization Member
- Canceling Member Invitation
- Binding Tags to Members and Departments
- Creating Member Login Permission
- Configuring Member Login Permission
- Authorizing Sub-Users to Log in to Member Accounts
- Configuring Message Subscription for Created Member
- Binding Security Information for Members
- Deleting Created Organization Member
- Enabling Member Deletion Permission
- Member Finance Management
- Member Access Management
- Service Control Policy
- Overview
- Enabling Service Control Policy
- Creating Custom Service Control Policy
- Viewing Service Control Policy Details
- Modifying Custom Service Control Policy
- Deleting Custom Service Control Policy
- Binding Custom Service Control Policy
- Unbinding Custom Service Control Policy
- Disabling Service Control Policy
- Service Control Policy
- Resource Management
- Member Audit
- Identity Center Management
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Organization Settings APIs
- Department and Member Management APIs
- ListOrganizationIdentity
- Unified Member Login APIs
- Organization Service Management APIs
- Resource Sharing APIs
- Identity Center Management APIs
- Identity Center User Management APIs
- Identity Center User Group Management APIs
- Identity Center Management SCIM Synchronization APIs
- Identity Center Single Sign-On Management APIs
- Identity Center Permission Configuration Management APIs
- ListRoleConfigurationProvisionings
- CreateRoleConfiguration
- ListRoleConfigurations
- ListPermissionPoliciesInRoleConfiguration
- GetRoleConfiguration
- RemovePermissionPolicyFromRoleConfiguration
- UpdateCustomPolicyForRoleConfiguration
- UpdateRoleConfiguration
- AddPermissionPolicyToRoleConfiguration
- DeleteRoleConfiguration
- Identity Center Multi-Account Authorization Management APIs
- Identity Center Sub-User Synchronization Management APIs
- Data Types
- Error Codes
- TCO API 2018-12-25
- History
- Introduction
- API Category
- Making API Requests
- Read APIs
- Write APIs
- UpdateOrganizationNode
- UpdateOrganizationMember
- SendOrganizationInvitation
- QuitOrganization
- MoveOrganizationMembersToNode
- DenyOrganizationInvitation
- DeleteOrganizationNodes
- DeleteOrganizationMemberFromNode
- DeleteOrganization
- CreateOrganization
- CancelOrganizationInvitation
- AddOrganizationNode
- AcceptOrganizationInvitation
- DeleteOrganizationMembers
- Data Types
- Error Codes
- Related Agreement
- FAQs
- Glossary
Overview
This document introduces how to create, view, and delete permission configuration.
Directions
Creating Permission Configuration
1. You have logged in to TCO > Identity Center.
2. In the left sidebar, click CAM Synchronization > Configuring Permission.
3. On the Configuring Permission page, click Create Permission Configuration.
4. On the Create Permission Configuration panel, configure the following basic information, and then click Next.
Permission Name: required parameter. It must be unique within the space.
Permission Description: optional parameter. It describes permission configuration.
5. To configure associated policies, you can choose to Import Policy Syntax or Custom Policy.
Importing policy syntax
Add a custom policy. Custom policies reuse CAM's policy syntax. For syntax logic, see Syntax Structure.
You can create custom policies using the visual policy generator. For configuration methods, see Creating Custom Policy.
Or create custom policies using JSON. For configuration methods, see Creating Custom Policies through Policy Syntax.
6. Click OK.
Viewing Permission Configuration
1. You have logged in to TCO > Identity Center.
2. In the left sidebar, click CAM Synchronization > Configuring Permission.
3. On the Configuring Permission page, click the target permission configuration name.
4. View the Basic Information of the permission configuration.
5. Click the Preset Policy tab to view preset policies for the permission configuration.
6. Click the Custom Policy tab to view custom policies for the permission configuration.
7. Click the Deploy tab to view member accounts that have been deployed under the permission configuration.
Deleting Permission Configuration
Prerequisites
Before deleting permission configuration, ensure that the following policies have been dissociated from the permission configuration:
Preset Policy: You need to delete preset policies for the permission configuration.
Custom Policy: You need to delete custom policies for the permission configuration.
Deployment: You need to undeploy the permission configuration in the member account.
Directions
1. You have logged in to TCO > Identity Center.
2. In the left sidebar, click CAM Synchronization > Configuring Permission.
3. On the Configuring Permission page, click the Operation column of the target permission configuration and then click Delete.
4. In the Delete Permission Configuration dialog box, click OK.
Yes
No
Was this page helpful?