Authorizing Sub-account Full Access to CVMs Except Payment

Recent Pages

Authorizing Sub-account Full Access to CVMs Except Payment

Last updated: 2024-01-23 18:02:53

The enterprise account, CompanyExample, whose ownerUin is 12345678, has a sub-account, Developer, that requires full management permissions (including all operations such as creation and management) for the CVM service of the CompanyExample enterprise account. These permissions do not include payment permissions, but allow orders to be made.
Solution A:
The CompanyExample enterprise account directly authorizes the preset policy QcloudCVMFullAccess to the Developer sub-account. For more information about authorization, see Authorization Management.
Solution B:
Step 1. Create the following policy according to policy syntax.
 {
    "version": "2.0",
    "statement":[
         {
             "effect": "allow",
             "action": "cvm:*",
             "resource": "*"
         }
    ]
}
Step 2. Authorize the policy to the sub-account. For more information about authorization, see Authorization Management.