Policy | Access | Description |
QcloudFinanceBillReadOnlyAccess | Read-only access to bills | The sub-user/collaborator can read the bills of the root account and its sub-accounts, but are not allowed to configure bill storage, confirm bills, apply for stamps, or set cost allocation tags. Note: If a sub-user/collaborator had been associated with the QCloudResourceFullAccess policy before July 29, 2021, you need to disassociate and associate the policy again; otherwise, all billing-related permissions will be denied. |
QcloudFinanceBillFullAccess | Read/Write access to bills | The sub-user/collaborator has read/write access to the bills of the root account and its sub-accounts. Notes: If a sub-user/collaborator had been associated with the QCloudResourceFullAccess policy before July 29, 2021, you need to disassociate and associate the policy again; otherwise, all billing-related permissions will be denied. To allow the sub-user/collaborator to configure bill storage, you also need to associate it with the following policies: QcloudCOSGetServiceAccess (access to COS buckets) QcloudCamSubaccountsAuthorizeRoleFullAccess (permission to authorize CAM service roles) |
QCloudFinanceFullAccess | All billing-related access | The sub-user/collaborator can perform any billing-related operation, such as payment or invoicing, for the root account and its sub-accounts. |
AdministratorAccess | Administrator access | The sub-user/collaborator can manage all users and their permissions, billing information, and resources under the root account. |
Was this page helpful?