This document guides you on how to use the Tencent Cloud root account to grant operation-level authorization to a sub-account. You can grant different read and write permissions to the sub-account based on actual needs.
Directions
Granting Full Read/Write Permissions
Note
After full read and write permissions are granted to the sub-account, the sub-account will have full read and write capability of all resources under the root account.
1. Log in to the CAM Console with the root account.
2. In the left sidebar, click Policies to enter the Policy Management List Page.
3. In the search bar on the right, enter QcloudTDMQFullAccess to search.
4. In the search results, click QcloudTDMQFullAccess to associate users/groups, and select the sub-account that needs to be authorized.
5. Click Confirm to complete the authorization. This policy will display in the user's policy list.
Granting Read-Only Permission
Note
After the read-only permission is granted to the sub-account, the sub-account will have read-only capability over all resources under the root account.
1. Log in to the CAM Console with the root account.
2. In the left sidebar, click Policies to enter the Policy Management List Page.
3. In the search bar on the right, enter QcloudTDMQReadOnlyAccess to search.
4. In the search results, click QcloudTDMQReadOnlyAccess to select the associated user/group you want to authorize for the sub-account.
5. Click Confirm to complete the authorization. This policy will display in the user's policy list.
