Granting Operation-Level Permissions to Sub-Accounts

Recent Pages

Granting Operation-Level Permissions to Sub-Accounts

Last updated: 2024-01-09 14:45:02

Overview
This document describes how to use the Tencent Cloud root account to authorize sub-accounts at the operation level. You can grant different read and write permissions to sub-accounts as needed.
Directions
Full access permission
Note:
After granting full access permissions to a sub-account, the sub-account will have full read and write capabilities to all resources under the root account.
1. Log in to the CAM Console with the root account.
2. In the left sidebar, click Policies to go to the policy management page.
3. Search for QcloudCKafkaFullAccess on the right.
﻿
﻿
﻿
4. In the search results, click the Associated Users/Groups of QcloudCKafkaFullAccess and select the sub-account to be authorized.
﻿
﻿
﻿
5. Click OK to complete the authorization, which will be displayed in the Policy List of the user.
﻿
﻿
﻿
Read-only permission
Note:
After granting the read-only permission to a sub-account, the sub-account will have read-only capability to all resources under the root account.
1. Log in to the CAM Console with the root account.
2. In the left sidebar, click Policies to go to the policy management page.
3. Search for QcloudCKafkaReadOnlyAccess on the right.
﻿
4. In the search results, click the Associated Users/Groups of QcloudCKafkaReadOnlyAccess and select the sub-account to be authorized.
﻿
5. Click OK to complete the authorization, which will be displayed in the Policy List of the user.
6. 
﻿
﻿
Other methods
Resource-Level Authorization
Tag-Level Authorization