In the CAM Console, the root account can configure permissions of common operations, services that can be manipulated, and API resources on API Gateway for sub-accounts and collaborators.
Directions
Sub-account or collaborator permission management (non-tagged resource)
2. In the policy list, click Create Custom Policy in the top-left corner.
3. In the policy creation pop-up window, select Create by Policy Builder:
4. Enter the custom policy information. After the settings are completed, click Add Statement and Next to enter the policy editing page.
Effect: allowed.
Service: API Gateway.
Action: select involved operations.
Resource: you can enter * to indicate all resources. If only part of resources are involved, you can set this field as instructed in Resource Description Method.
5. Enter the policy name and edit the policy content (for detailed directions, please see Policy Syntax).
Sub-account or collaborator permission management (tagged resource)
Tag is a unified capability in Tencent Cloud. You can set the same tag for different resources in different Tencent Cloud products so that they can have the same operation permissions.
Note:
The same entry is used for configuring tagged management permissions and non-tagged management permissions. You can create an Authorize by Tag policy in CAM > Policy. For detailed directions, please see Authorizing by Tag.
