tencent cloud

Feedback

Granting Sub-User Feature Permissions

Last updated: 2022-09-19 15:47:05
    This document describes how to use the root account to grant a sub-user the permissions of the custom password strength feature.

    Overview

    Your root account has all permissions of the custom password strength feature with no additional settings needed. By default, sub-users don't have permissions of this feature. Therefore, you need to create policies to allow the target sub-user to use the feature.
    Cloud Access Management (CAM) is a web service provided by Tencent Cloud that helps you securely manage access to the resources under your Tencent Cloud account. CAM allows you to create, manage, or terminate users or user groups and control who is allowed to use your Tencent Cloud resources through identity and policy management.
    When using CAM, you can associate a policy with a user or user group to allow or forbid them to use specified resources to complete specified tasks. For more information on CAM policies, see Element Reference.

    Directions

    1. Log in to the CAM console with the root account, locate the target sub-user in the user list, and click Authorize.
    img
    
    2. Set the following permissions based on the account's needs. Note that no matter whether the sub-user needs to use the custom password strength feature, we recommend you always add cynosdb:DescribeClusterPasswordComplexity to the sub-user, so that they can view the detailed password strength settings configured by the root account in the console and set compliant passwords accordingly.

    CAM permission description

    Permission
    Purpose
    cynosdb:DescribeClusterPasswordComplexity
    Displays the detailed settings and enablement status of the custom password strength feature
    cynosdb:CloseClusterPasswordComplexity
    (Batch) disables the custom password strength feature
    cynosdb:CopyClusterPasswordComplexity
    Syncs the custom password strength parameters to other clusters under the current account
    cynosdb:ModifyClusterPasswordComplexity
    Modifies the detailed settings of the custom password strength feature
    cynosdb:OpenClusterPasswordComplexity
    Enables the custom password strength feature
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support