tencent cloud

All product documents
Tencent Kubernetes Engine
DocumentationTencent Kubernetes EngineTKE General Cluster Guide Permission Management Controlling TKE cluster-level permissions Usage ExamplesConfiguring a Sub-account's Full Read/write or Read-only Permission to TKE
Configuring a Sub-account's Full Read/write or Read-only Permission to TKE
Download PDF
Last updated: 2024-12-11 18:50:30
Configuring a Sub-account's Full Read/write or Read-only Permission to TKE
Last updated: 2024-12-11 18:50:30
Download PDF

Overview

You can grant a user the permissions to view and use specific resources in the TKE console by using a CAM policy. This document describes how to configure certain permission policies in the console.

Directions

Configuring Full Read/write Permission

1. Log in to the CAM console and select Policies in the left sidebar.
2. On the Policies page, click Bind User/Group/Role in the Operation column of the QcloudTKEFullAccess policy.

3. In the Bind User/Group/Role window that pops up, select the accounts that need full read/write permission for the TKE service, and click OK to grant full read/write permission for the TKE service to the sub-accounts.
4. On the Policies page, click Bind User/Group/Role in the Operation column of the QcloudCCRFullAccess policy.
5. In the Bind User/Group/Role window that pops up, select the accounts that need full read/write permission for Image Registry, and click OK to grant full read/write permission for Image Registry to the sub-accounts.
Note:
If you want to use the trigger and automatic building features of Image Registry, you also need to configure additional permissions for TKE - continuous integration (CCB).

Configuring Read-only Permission

1. Log in to the CAM console and select Policies in the left sidebar.
2. On the Policies page, click Bind User/Group/Role in the Operation column of the QcloudTKEReadOnlyAccess policy.
3. In the Bind User/Group/Role window that pops up, select the accounts that need the read-only permission for the TKE service, and click OK to grant the read-only permission for the TKE service to the sub-accounts.
4. On the Policies page, click Bind User/Group/Role in the Operation column of the *QcloudCCRReadOnlyAccess policy.
5. In the Bind User/Group/Role window that pops up, select the accounts that need the read-only permission for Image Registry, and click OK to grant the read-only permission for Image Registry to the sub-accounts.
Note:
If you want to use the trigger and automatic building features of Image Registry, you also need to configure additional permissions for TKE - continuous integration (CCB).
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Contact Us
Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

Submit a Ticket
7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon