tencent cloud

Feedback

Granting Billing-related CAM Access

Last updated: 2024-01-02 15:14:59

    Overview

    This document shows you how to grant a sub-account (sub-user/collaborator) read-only or read/write access to bills via the CAM console.

    Directions

    Creating sub-user/collaborator

    For detailed directions on how to create a sub-user/collaborator, see Creating Sub-user/Creating Collaborator.

    Associating preset policy

    1. On the User List page, find the target sub-user/collaborator and click Authorize.
    
    
    2. Select a billing-related preset policy (e.g., QcloudFinanceBillReadOnlyAccess) you want to associate and click Confirm.
    
    
    For detailed directions, see Authorization Management.
    Policy
    Access
    Description
    QcloudFinanceBillReadOnlyAccess
    Read-only access to bills
    The sub-user/collaborator can read the bills of the root account and its sub-accounts, but are not allowed to configure bill storage, confirm bills, apply for stamps, or set cost allocation tags.
    Note: If a sub-user/collaborator had been associated with the QCloudResourceFullAccess policy before July 29, 2021, you need to disassociate and associate the policy again; otherwise, all billing-related permissions will be denied.
    QcloudFinanceBillFullAccess
    Read/Write access to bills
    The sub-user/collaborator has read/write access to the bills of the root account and its sub-accounts.
    Notes:
    If a sub-user/collaborator had been associated with the QCloudResourceFullAccess policy before July 29, 2021, you need to disassociate and associate the policy again; otherwise, all billing-related permissions will be denied.
    To allow the sub-user/collaborator to configure bill storage, you also need to associate it with the following policies:
    QcloudCOSGetServiceAccess (access to COS buckets)
    QcloudCamSubaccountsAuthorizeRoleFullAccess (permission to authorize CAM service roles)
    QCloudFinanceFullAccess
    All billing-related access
    The sub-user/collaborator can perform any billing-related operation, such as payment or invoicing, for the root account and its sub-accounts.
    AdministratorAccess
    Administrator access
    The sub-user/collaborator can manage all users and their permissions, billing information, and resources under the root account.
    
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support