This document describes the access management feature of VOD. For more information on access management for other Tencent Cloud services, please see CAM-Enabled Products.
Access management is essentially to bind sub-accounts to policies or grant policies to sub-accounts. You can use preset policies directly in the console to implement some simple authorization operations. For more complicated authorization operations, please see Custom Policy.
Currently, VOD provides the following preset policies:
Policy Name
Description
QcloudVODFullAccess
Full access to VOD
QcloudVODReadonlyAccess
Read-only access to VOD
Preset Policy Use Cases
Creating subuser with full access to VOD
1. Access the User List page in the CAM console as a root account and click Create User.
2. On the Create User page, click Custom Creation.
3. Click Next and enter the user information.
Enter the username, select Programming Access and Tencent Cloud Console Access, and configure other options as needed.
Click Next and complete authentication as prompted.
4. Set user permissions.
Search for and select the preset policy QcloudVODFullAccess.
Click Next.
5. Click Complete in the "Review Info and Permission" column. After the user is created successfully, download the login link and security credentials as shown below and keep them safe.
Information
Source
Function
Storage Required
Login link
Copy on the page
Makes it easier to log in to the console without having to enter the root account
No
Username
Security credential file in CSV format
Required for console login
Yes
Password
Security credential file in CSV format
Required for console login
Yes
SecretId
Security credential file in CSV format
Required for server API call. For more information, please see Access Key
Yes
SecretKey
Security credential file in CSV format
Required for server API call. For more information, please see Access Key
Yes
With the above login link and security credentials, you can use this subuser to perform all operations in VOD (e.g., accessing the VOD console and calling VOD server APIs).
Note:
For more information on how to create a subuser, please see the Creating Subusers document of CAM.
Granting full permissions of VOD to existing subusers
1. Access the User List in the CAM console as a root account and click the target sub-account.
2. Click Add Policy in the Permission column on the User Details page, as shown below (in practice, the information displayed on this page may vary by existing permissions of the sub-account. If the permission of a sub-account is not empty, please click Associate Policy).
3. Click Select Policy from Policy List to Associate, search for and check the preset policy QcloudVODFullAccess, and complete authorization as prompted.
Revoking subuser's full access to VOD
1. Access the User List in the CAM console as a root account and click the target sub-account.
2. Find the preset policy QcloudVODFullAccess in the Permission column on the User Details page, click Unassociate on the right, and complete deauthorization as prompted.
Yes
No
Was this page helpful?